NetSight
IP …
high8.2

CVE-2021-42554

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42…

Impact

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

Affected products

VendorProductAffected versions
InsydeInsydeh2o
from 5.0 before 5.08.42
from 5.1 before 5.16.42
from 5.2 before 5.26.42
from 5.3 before 5.35.42
from 5.4 before 5.42.51
from 5.5 before 5.50.51
SiemensSimatic Field Pg M5 Firmware
All versions
SiemensSimatic Field Pg M6 Firmware
All versions
SiemensSimatic Ipc127e Firmware
All versions
SiemensSimatic Ipc227g Firmware
All versions
SiemensSimatic Ipc277g Firmware
All versions
SiemensSimatic Ipc327g Firmware
All versions
SiemensSimatic Ipc377g Firmware
All versions
SiemensSimatic Ipc427e Firmware
All versions
SiemensSimatic Ipc477e Firmware
All versions
SiemensSimatic Ipc627e Firmware
All versions
SiemensSimatic Ipc647e Firmware
All versions

Weakness classification

CWE-787

References