HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2021-33627

CVSS 8.2v3.1pub. 2022-02-03upd. 2026-08-11

An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11, and 5.5 before 05.52.11 affecting FwBlockServiceSmm. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Insyde Insydeh2o

    APP
    Insyde
    5.1 – 5.16.29 (excl.)5.2 – 5.26.29 (excl.)5.3 – 5.35.29 (excl.)5.0 – 5.08.29 (excl.)

  • Siemens Simatic Field Pg M5

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M5 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Field Pg M6

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M6 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc127e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc127e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc227g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc227g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc277g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc277g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc327g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc327g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc377g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc377g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc427e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc427e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc477e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc477e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc627e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc627e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc647e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc647e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc677e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc677e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc847e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc847e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Itp1000

    HW
    Siemens
    all versions

  • Siemens Simatic Itp1000 Firmware

    OS
    Siemens
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2017-5689CRITICAL9.8⚠ KEVPL ✓same product

Privilege Escalation w Intel AMT/ISM/SBT — nieautoryzowany dostęp systemowy

CVE-2023-51438CRITICAL10.0PL ✓same product

Nieautoryzowany dostęp w maxView Storage Manager via Redfish Server

CVE-2023-39281CRITICAL9.8PL ✓same product

Stack buffer overflow w AsfSecureBootDxe (InsydeH2O) — RCE w fazie DXE

CVE-2021-41842CRITICAL9.8PL ✓same product

RCE w Insyde InsydeH2O — brak weryfikacji CommBuffer w SMI handler

CVE-2024-55567HIGH7.5same product

Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 bef...