PT-2022-22809 · Insyde · Insydeh2O

Published 2022-09-22 · Updated 2022-09-23 · CVE-2022-35408

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O versions 5.0 through 5.5

Description An issue was discovered in Insyde InsydeH2O, where an SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads to possible arbitrary code execution in SMM and escalation of privileges. An attacker could overwrite the function pointers in the EFI BOOT SERVICES table before the USB SMI handler triggers. This issue is not exploitable from code running in the operating system.

Recommendations For Insyde InsydeH2O versions 5.0 through 5.5, consider disabling the UsbLegacyControlSmm SMM driver as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-123

Related Identifiers

CVE-2022-35408

Affected Products

Insydeh2O

References · 6

• 🔥 https://binarly.io/advisories/BRLY-2022-022/index.html · Exploit
• https://insyde.com/security-pledge · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35408 · Security Note
• https://osv.dev/vulnerability/CVE-2022-35408 · Vendor Advisory
• https://insyde.com/security-pledge/SA-2022031 · Vendor Advisory
• https://t.me/cibsecurity/50287 · Telegram Post