Insyde Software

Records127All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high91CVSS 7.0–8.9

Exploited now

Insyde Software records in CISA KEV

No Insyde Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Insydeh2o 66 records HIGH Kernel 33 records MEDIUM H2offt 2 records LOW H2oelv 1 record LOW H2ooae 1 record LOW H2opcm 1 record LOW H2osde 1 record LOW H2ouve 1 record LOW

Records

66 records in Insydeh2o · all components

TI-2023-08797 CVE-2023-22614 · GHSA-7x7c-2rvc-69fh

An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00378 Published 2023-04-11 No fix listed CWE-787

TI-2022-16772 CVE-2022-36448 · GHSA-cw76-gh48-42j3

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00335 Published 2022-09-28 No fix listed CWE-20

TI-2022-16681 CVE-2022-36338 · GHSA-hhx4-8rv9-cwrp

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00463 Published 2022-09-23 No fix listed

TI-2022-16323 CVE-2022-35895 · GHSA-mm42-46m4-7pp9

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00378 Published 2022-09-21 No fix listed CWE-787

TI-2022-15984 CVE-2022-35408 · GHSA-49c7-gf66-cc93

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

HIGH 71

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00367 Published 2022-09-22 No fix listed CWE-123

TI-2023-08799 CVE-2023-22616 · GHSA-f9jq-jhvv-4xmw

An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5.

HIGH 69

An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00369 Published 2023-04-12 No fix listed CWE-610

TI-2022-16324 CVE-2022-35896 · GHSA-hvm4-7p57-c7mx

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde…

MEDIUM 60

An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00326 Published 2022-09-21 No fix listed CWE-20

TI-2022-16322 CVE-2022-35894 · GHSA-9w4x-cwgm-cchf

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

MEDIUM 60

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00335 Published 2022-09-22 No fix listed CWE-401

TI-2021-18465 CVE-2021-41842 · GHSA-v6qx-c5rh-4q6q

An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before…

MEDIUM 45

An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.4 before 05.43.46, and 5.5 before 05.51.45 in Insyde InsydeH2O.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01585 Published 2022-01-05 No fix listed

TI-2023-20426 CVE-2023-39281 · GHSA-grf5-hh55-whxh

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O…

MEDIUM 43

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00505 Published 2023-11-01 No fix listed CWE-121

TI-2023-14777 CVE-2023-31041 · GHSA-5q2q-3px6-4458

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5.

LOW 39

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00365 Published 2023-08-14 No fix listed CWE-312

TI-2023-08795 CVE-2023-22612 · GHSA-rjr7-qrvq-fgxf

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

LOW 39

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00228 Published 2023-04-11 No fix listed CWE-787

TI-2023-08796 CVE-2023-22613 · GHSA-g2w9-pvr5-q6m3

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

LOW 37

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00212 Published 2023-04-11 No fix listed CWE-787

TI-2022-16321 CVE-2022-35893 · GHSA-q472-4r55-2p86

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

LOW 37

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0023 Published 2022-09-23 No fix listed CWE-20

TI-2023-17037 CVE-2023-34195 · GHSA-xjr2-gpjv-fx34

An issue was discovered in SystemFirmwareManagementRuntimeDxe in Insyde InsydeH2O with…

LOW 36

An issue was discovered in SystemFirmwareManagementRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00232 Published 2023-09-18 No fix listed CWE-94

TI-2023-08798 CVE-2023-22615 · GHSA-xqp8-x7jr-ghp9

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

LOW 36

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5.

CVSS 3.1HIGH 8.4 Local Low privileges No interaction EPSS 0.00204 Published 2023-04-11 No fix listed CWE-787

TI-2021-20967 CVE-2021-45970 · GHSA-3p59-3fgj-3hg8

An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25…

LOW 36

An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.0035 Published 2022-01-05 No fix listed CWE-787

TI-2021-19312 CVE-2021-43323 · GHSA-v6h3-3hh9-32cf

An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before…

LOW 36

An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 before 05.26.45, 5.1 before 05.16.45, and 5.0 before 05.08.45.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00351 Published 2022-02-03 No fix listed

TI-2021-18839 CVE-2021-42554 · GHSA-9hwg-wq94-95pr

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1…

LOW 36

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00327 Published 2022-02-03 No fix listed CWE-787

TI-2021-18570 CVE-2021-42060 · GHSA-2m37-rjqx-pvcg

An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1…

LOW 36

An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before 05.32.22.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00353 Published 2022-02-03 No fix listed

TI-2021-13002 CVE-2021-33627 · GHSA-g6pg-5762-5mq6

An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before…

LOW 36

An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11, and 5.5 before 05.52.11 affecting FwBlockServiceSmm.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00328 Published 2022-02-03 No fix listed CWE-119

TI-2023-20427 CVE-2023-39283 · GHSA-hq2f-86fm-7823

An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm…

LOW 35

An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escal…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00206 Published 2023-11-02 No fix listed CWE-787

TI-2022-15236 CVE-2022-34325 · GHSA-gqmx-7hj9-m7jj

DMA transactions which are targeted at input buffers used for the…

LOW 35

DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00137 Published 2022-11-14 No fix listed CWE-367

TI-2022-08025 CVE-2022-24069 · GHSA-pjmr-mr6j-2v2f

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before…

LOW 35

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before 05.08.41, 5.1 before 05.16.29, 5.2 before 05.26.29, 5.3 before 05.35.29, 5.4 before 05.43.29, and 5.5 before 05.51.29.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00301 Published 2022-02-02 No fix listed

TI-2022-07993 CVE-2022-24031 · GHSA-2r3f-c2cg-qfw6

An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5.

LOW 35

An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00281 Published 2022-02-03 No fix listed CWE-787

Open these records in search →