HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2021-33625

CVSS 7.5v3.1pub. 2022-02-03upd. 2026-08-11

An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Insyde Insydeh2o

    APP
    Insyde
    5.1 – 5.16.23 (excl.)5.2 – 5.26.23 (excl.)5.3 – 5.35.23 (excl.)5.4 – 5.43.22 (excl.)5.5 – 5.51.22 (excl.)

  • Netapp Fas\/aff Bios

    OS
    Netapp
    all versions

  • Siemens Ruggedcom Ape1808

    HW
    Siemens
    all versions

  • Siemens Ruggedcom Ape1808 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Field Pg M5

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M5 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Field Pg M6

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M6 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc127e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc127e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc227g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc227g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc277g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc277g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc327g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc327g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc377g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc377g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc427e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc427e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc477e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc477e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc477e Pro

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc477e Pro Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc627e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc627e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc647e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc647e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc677e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc677e Firmware

    OS
    Siemens
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2026-0300CRITICAL9.3⚠ KEVPL ✓same product

Buffer overflow RCE z uprawnieniami root w PAN-OS Captive Portal

CVE-2026-24858CRITICAL9.8⚠ KEVPL ✓same product

Fortinet – Auth Bypass przez FortiCloud SSO w wielu produktach

CVE-2025-59718CRITICAL9.8⚠ KEVPL ✓same product

Fortinet FortiOS/FortiProxy/FortiSwitchManager — Auth Bypass przez SAML

CVE-2017-5689CRITICAL9.8⚠ KEVPL ✓same product

Privilege Escalation w Intel AMT/ISM/SBT — nieautoryzowany dostęp systemowy

CVE-2023-51438CRITICAL10.0PL ✓same product

Nieautoryzowany dostęp w maxView Storage Manager via Redfish Server