PT-2022-1743 · Insyde · Insydeh2O

Published 2022-01-05 · Updated 2022-03-29 · CVE-2021-45971

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions InsydeH2O kernel versions 5.1 through 05.16.24 InsydeH2O kernel versions 5.2 through 05.26.24 InsydeH2O kernel versions 5.3 through 05.35.24 InsydeH2O kernel versions 5.4 through 05.43.24 InsydeH2O kernel versions 5.5 through 05.51.24

Description A vulnerability exists in the SMM (System Management Mode) branch of the SdHostDriver component in InsydeH2O, which registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (CommBufferData). This issue is related to a buffer overflow in memory, which could allow an attacker to execute arbitrary code in the target system.

Recommendations For kernel version 5.1, update to version 05.16.25 or later. For kernel version 5.2, update to version 05.26.25 or later. For kernel version 5.3, update to version 05.35.25 or later. For kernel version 5.4, update to version 05.43.25 or later. For kernel version 5.5, update to version 05.51.25 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-01020

CVE-2021-45971

Affected Products

Insydeh2O

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2021-45971 · Security Note
• https://osv.dev/vulnerability/CVE-2021-45971 · Vendor Advisory
• https://insyde.com/security-pledge · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01020 · Security Note
• https://t.me/cvenotify/25001 · Telegram Post
• https://kb.cert.org/vuls/id/796611 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf · Note
• https://security.netapp.com/advisory/ntap-20220216-0004 · Note