HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2021-41837

CVSS 8.2v3.1pub. 2022-02-03upd. 2026-08-11

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

  • Insyde Insydeh2o

    APP
    Insyde
    5.0 – 5.08.41 (excl.)5.1 – 5.16.41 (excl.)5.2 – 5.26.41 (excl.)5.3 – 5.35.41 (excl.)5.4 – 5.43.41 (excl.)5.5 – 5.51.41 (excl.)

  • Siemens Simatic Field Pg M5

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M5 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Field Pg M6

    HW
    Siemens
    all versions

  • Siemens Simatic Field Pg M6 Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc127e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc127e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc227g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc227g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc277g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc277g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc327g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc327g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc377g

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc377g Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc427e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc427e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc477e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc477e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc627e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc627e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc647e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc647e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc677e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc677e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Ipc847e

    HW
    Siemens
    all versions

  • Siemens Simatic Ipc847e Firmware

    OS
    Siemens
    all versions

  • Siemens Simatic Itp1000

    HW
    Siemens
    all versions

  • Siemens Simatic Itp1000 Firmware

    OS
    Siemens
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2017-5689CRITICAL9.8⚠ KEVPL ✓same product

Privilege Escalation w Intel AMT/ISM/SBT — nieautoryzowany dostęp systemowy

CVE-2023-51438CRITICAL10.0PL ✓same product

Nieautoryzowany dostęp w maxView Storage Manager via Redfish Server

CVE-2023-39281CRITICAL9.8PL ✓same product

Stack buffer overflow w AsfSecureBootDxe (InsydeH2O) — RCE w fazie DXE

CVE-2021-41842CRITICAL9.8PL ✓same product

RCE w Insyde InsydeH2O — brak weryfikacji CommBuffer w SMI handler

CVE-2024-55567HIGH7.5same product

Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 bef...