CVE-2021-41841
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A vulnerability in AhciBusDxe in InsydeH2O with kernel 5.0-5.5 allows an attacker to access System Management Mode and execute arbitrary code, due to inclusion of functionality from an untrusted control sphere.
Risk Assessment
An attacker could gain full control over the system, potentially installing persistent backdoors or compromising the entire infrastructure.
Recommendation
Update InsydeH2O to a patched version.
Other vulnerabilities in InsydeH2O
See all- CVE-2022-24031High
An issue was discovered in NvmExpressDxe in InsydeH2O with kernels 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM, potentially escalating privileges to SMM.
- CVE-2022-24030High
A vulnerability in AhciBusDxe in InsydeH2O with kernel 5.1-5.5 involves SMM memory corruption, allowing an attacker to write fixed or predictable data to SMRAM, potentially leading to privilege escalation to SMM.
- CVE-2021-43615High
An issue was discovered in HddPassword in InsydeH2O with kernels 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM, potentially escalating privileges to SMM.
- CVE-2021-43323High
A vulnerability in UsbCoreDxe in InsydeH2O (kernel 5.5 to 5.0) allows an attacker to hijack execution flow of code running in System Management Mode via an SMM callout. Exploitation could lead to privilege escalation to SMM.
- CVE-2021-42554High
A vulnerability in InsydeH2O with Kernel 5.0-5.5 involves SMM memory corruption in FvbServicesRuntimeDxe, allowing an attacker to write fixed or predictable data to SMRAM, potentially leading to privilege escalation to SMM.
- CVE-2021-42113High
A vulnerability in StorageSecurityCommandDxe in InsydeH2O with Kernel 5.1-5.3 involves an SMM callout that allows an attacker to hijack execution flow of code running in System Management Mode, potentially leading to privilege escalation to SMM.
- CVE-2021-42060High
A vulnerability in InsydeH2O Kernel allows an attacker to hijack execution flow of code running in System Management Mode via an Int15ServiceSmm SMM callout. Exploiting this issue could lead to escalating privileges to SMM.
- CVE-2021-42059Medium
In InsydeH2O Kernel 5.0 through 5.4 before specific versions, a stack-based buffer overflow in the UEFI DisplayTypeDxe DXE driver can lead to arbitrary code execution.
- CVE-2021-41840High
A vulnerability in NvmExpressDxe in InsydeH2O with kernel 5.0-5.5 allows an attacker to access System Management Mode and execute arbitrary code, due to inclusion of functionality from an untrusted control sphere.
- CVE-2021-41839High
An issue was discovered in NvmExpressDxe in InsydeH2O for kernels 5.0 through 5.5. An untrusted pointer dereference causes SMM memory corruption, allowing an attacker to write fixed or predictable data to SMRAM, potentially escalating privileges to SMM.
Original NVD description (English source)
An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of Functionality from an Untrusted Control Sphere.