PT-2024-11745 · Insyde · Insydeh2O

Published 2024-04-22 · Updated 2025-07-29 · CVE-2022-46897

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O versions 5.0 through 5.5

Description An issue was discovered in the CapsuleIFWUSmm driver, which does not check the return value from a method or function. This can prevent it from detecting unexpected states and conditions.

Recommendations For versions 5.0 through 5.5, consider disabling the CapsuleIFWUSmm driver as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

CVE-2022-46897

Affected Products

Insydeh2O

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-46897 · Security Note
• https://osv.dev/vulnerability/CVE-2022-46897 · Vendor Advisory
• https://insyde.com/security-pledge · Vendor Advisory
• https://t.me/cvenotify/77673 · Telegram Post
• https://t.me/cveNotify/130180 · Telegram Post