PT-2022-1742 · Insyde · Insydeh2O

Published 2022-01-05 · Updated 2022-03-29 · CVE-2021-45970

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions InsydeH2O kernel versions 5.1 through 05.16.24 InsydeH2O kernel versions 5.2 through 05.26.24 InsydeH2O kernel versions 5.3 through 05.35.24 InsydeH2O kernel versions 5.4 through 05.43.24 InsydeH2O kernel versions 5.5 through 05.51.24

Description A vulnerability exists in the SMM (System Management Mode) branch of IdeBusDxe in InsydeH2O, which registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer. This issue is related to a buffer overflow in memory, which could allow an attacker to execute arbitrary code in the target system.

Recommendations For InsydeH2O kernel versions 5.1 through 05.16.24, update to version 05.16.25 or later. For InsydeH2O kernel versions 5.2 through 05.26.24, update to version 05.26.25 or later. For InsydeH2O kernel versions 5.3 through 05.35.24, update to version 05.35.25 or later. For InsydeH2O kernel versions 5.4 through 05.43.24, update to version 05.43.25 or later. For InsydeH2O kernel versions 5.5 through 05.51.24, update to version 05.51.25 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-01018

CVE-2021-45970

Affected Products

Insydeh2O

References · 9

• https://insyde.com/security-pledge · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-45970 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45970 · Security Note
• https://bdu.fstec.ru/vul/2022-01018 · Security Note
• https://t.me/cvenotify/24998 · Telegram Post
• https://kb.cert.org/vuls/id/796611 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf · Note
• https://t.me/cvenotify/25441 · Telegram Post
• https://security.netapp.com/advisory/ntap-20220216-0004 · Note