Beveiligingsadvies

CVE-2021-43522

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-02-02 23:41:09
Laatst bijgewerkt 2026-08-11 12:22:20
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurityCommandDxe SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.