CVE-2021-43323
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
A vulnerability in UsbCoreDxe in InsydeH2O (kernel 5.5 to 5.0) allows an attacker to hijack execution flow of code running in System Management Mode via an SMM callout. Exploitation could lead to privilege escalation to SMM.
Risk Assessment
An attacker can gain the highest privileges in the system (SMM), leading to complete platform and data compromise.
Recommendation
Update InsydeH2O firmware to a version containing the fix (05.51.45, 05.43.45, 05.35.45, 05.26.45, 05.16.45, 05.08.45 or later).
Other vulnerabilities in InsydeH2O
See all- CVE-2022-24031High
An issue was discovered in NvmExpressDxe in InsydeH2O with kernels 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM, potentially escalating privileges to SMM.
- CVE-2022-24030High
A vulnerability in AhciBusDxe in InsydeH2O with kernel 5.1-5.5 involves SMM memory corruption, allowing an attacker to write fixed or predictable data to SMRAM, potentially leading to privilege escalation to SMM.
- CVE-2021-43615High
An issue was discovered in HddPassword in InsydeH2O with kernels 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM, potentially escalating privileges to SMM.
- CVE-2021-42554High
A vulnerability in InsydeH2O with Kernel 5.0-5.5 involves SMM memory corruption in FvbServicesRuntimeDxe, allowing an attacker to write fixed or predictable data to SMRAM, potentially leading to privilege escalation to SMM.
- CVE-2021-42113High
A vulnerability in StorageSecurityCommandDxe in InsydeH2O with Kernel 5.1-5.3 involves an SMM callout that allows an attacker to hijack execution flow of code running in System Management Mode, potentially leading to privilege escalation to SMM.
- CVE-2021-42060High
A vulnerability in InsydeH2O Kernel allows an attacker to hijack execution flow of code running in System Management Mode via an Int15ServiceSmm SMM callout. Exploiting this issue could lead to escalating privileges to SMM.
- CVE-2021-42059Medium
In InsydeH2O Kernel 5.0 through 5.4 before specific versions, a stack-based buffer overflow in the UEFI DisplayTypeDxe DXE driver can lead to arbitrary code execution.
- CVE-2021-41841High
A vulnerability in AhciBusDxe in InsydeH2O with kernel 5.0-5.5 allows an attacker to access System Management Mode and execute arbitrary code, due to inclusion of functionality from an untrusted control sphere.
- CVE-2021-41840High
A vulnerability in NvmExpressDxe in InsydeH2O with kernel 5.0-5.5 allows an attacker to access System Management Mode and execute arbitrary code, due to inclusion of functionality from an untrusted control sphere.
- CVE-2021-41839High
An issue was discovered in NvmExpressDxe in InsydeH2O for kernels 5.0 through 5.5. An untrusted pointer dereference causes SMM memory corruption, allowing an attacker to write fixed or predictable data to SMRAM, potentially escalating privileges to SMM.
Original NVD description (English source)
An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 before 05.26.45, 5.1 before 05.16.45, and 5.0 before 05.08.45. An SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.