Security Advisory

CVE-2020-5953

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-03 01:00:57

Last updated 2025-11-04 19:12:23

Assigner mitre

State PUBLISHED

Description

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).

← Browse all CVEs View on cve.org ↗