PT-2022-1744 · Insyde · Insydeh2O

Published 2022-01-05 · Updated 2022-03-29 · CVE-2021-45969

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions InsydeH2O kernel versions 5.1 through 05.16.24 InsydeH2O kernel versions 5.2 through 05.26.24 InsydeH2O kernel versions 5.3 through 05.35.24 InsydeH2O kernel versions 5.4 through 05.43.24 InsydeH2O kernel versions 5.5 through 05.51.24

Description A vulnerability exists in the SMM (System Management Mode) branch of the AhciBusDxe component in InsydeH2O, which registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location). This issue is related to a buffer overflow in memory, which can be exploited to execute arbitrary code in the target system.

Recommendations For InsydeH2O kernel versions 5.1 through 05.16.24, update to version 05.16.25 or later. For InsydeH2O kernel versions 5.2 through 05.26.24, update to version 05.26.25 or later. For InsydeH2O kernel versions 5.3 through 05.35.24, update to version 05.35.25 or later. For InsydeH2O kernel versions 5.4 through 05.43.24, update to version 05.43.25 or later. For InsydeH2O kernel versions 5.5 through 05.51.24, update to version 05.51.25 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2022-01021

CVE-2021-45969

Affected Products

Insydeh2O

References · 9

• https://osv.dev/vulnerability/CVE-2021-45969 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-45969 · Security Note
• https://insyde.com/security-pledge · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-01021 · Security Note
• https://kb.cert.org/vuls/id/796611 · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf · Note
• https://security.netapp.com/advisory/ntap-20220216-0004 · Note
• https://t.me/cvenotify/25439 · Telegram Post
• https://t.me/cvenotify/24999 · Telegram Post