PT-2022-10274 · Insyde · Insydeh2O Kernel

CVE-2021-33627 · Published 2022-02-03 · Updated 2024-07-22

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O Kernel versions 5.0 through 5.0 before 05.09.11 Insyde InsydeH2O Kernel versions 5.1 through 5.1 before 05.17.11 Insyde InsydeH2O Kernel versions 5.2 through 5.2 before 05.27.11 Insyde InsydeH2O Kernel versions 5.3 through 5.3 before 05.36.11 Insyde InsydeH2O Kernel versions 5.4 through 5.4 before 05.44.11 Insyde InsydeH2O Kernel versions 5.5 through 5.5 before 05.52.11

Description An issue was discovered in Insyde InsydeH2O Kernel affecting FwBlockServiceSmm. Software SMI services that use the Communicate() function of the EFI SMM COMMUNICATION PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses. This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code execution.

Recommendations For Insyde InsydeH2O Kernel version 5.0 before 05.09.11, update to version 05.09.11 or later. For Insyde InsydeH2O Kernel version 5.1 before 05.17.11, update to version 05.17.11 or later. For Insyde InsydeH2O Kernel version 5.2 before 05.27.11, update to version 05.27.11 or later. For Insyde InsydeH2O Kernel version 5.3 before 05.36.11, update to version 05.36.11 or later. For Insyde InsydeH2O Kernel version 5.4 before 05.44.11, update to version 05.44.11 or later. For Insyde InsydeH2O Kernel version 5.5 before 05.52.11, update to version 05.52.11 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2021-33627

Affected Products

Insydeh2O Kernel

References · 10

• https://insyde.com/security-pledge · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33627 · Security Note
• https://osv.dev/vulnerability/CVE-2021-33627 · Vendor Advisory
• https://insyde.com/security-pledge/SA-2022022 · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220222-0002 · Note
• https://t.me/cvenotify/26529 · Telegram Post
• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf · Note
• https://t.me/cvenotify/87055 · Telegram Post
• https://t.me/cibsecurity/36751 · Telegram Post
• https://kb.cert.org/vuls/id/796611 · Note