CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2021-41842

CVSS 9.8v3.1pub. 2022-01-06upd. 2024-11-21

An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O. Code execution can occur because the SMI handler lacks a CommBuffer check.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Insyde Insydeh2o

    APP
    Insyde
    5.0 – 05.08.46 (bez)5.1 – 05.16.46 (bez)5.2 – 05.26.46 (bez)5.3 – 05.35.46 (bez)< 05.43.465.5 – 05.51.45 (bez)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCE
CWE
References

Related vulnerabilities

CVE-2023-39281CRITICAL9.8ten sam produkt

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 throu...

CVE-2024-55567HIGH7.5ten sam produkt

Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 bef...

CVE-2024-52878HIGH7.5ten sam produkt

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.3...

CVE-2024-52877HIGH7.5ten sam produkt

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.3...

CVE-2024-52879HIGH7.5ten sam produkt

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.3...