CVE-2023-27373
07.08.2023, 15:15
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM.Enginsight
| Vendor | Product | Version |
|---|---|---|
| insyde | insydeh2o | 5.0 |
| insyde | insydeh2o | 5.1 |
| insyde | insydeh2o | 5.2 |
| insyde | insydeh2o | 5.3 |
| insyde | insydeh2o | 5.4 |
| insyde | insydeh2o | 5.5 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration