PT-2022-23001 · Insyde · Insydeh2O

Published 2022-09-23 · Updated 2023-08-08 · CVE-2022-35893

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O versions 5.0 through 5.5

Description An issue in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM, potentially leading to escalating privileges to SMM. This is due to an SMM memory corruption vulnerability.

Recommendations For versions 5.0 through 5.5, consider disabling the FvbServicesRuntimeDxe driver as a temporary workaround until a patch is available. Restrict access to SMRAM to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-35893

Affected Products

Insydeh2O

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-35893 · Security Note
• https://insyde.com/security-pledge/SA-2022035 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-35893 · Vendor Advisory
• https://insyde.com/security-pledge · Vendor Advisory
• https://binarly.io/advisories/BRLY-2022-026/index.html · Note
• https://t.me/cibsecurity/50370 · Telegram Post