CRITICAL🇵🇱 Wersja polska

CVE-2023-39281

CVSS 9.8v3.1pub. 2023-11-01upd. 2024-11-21

A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Insyde Insydeh2o

    APP
    Insyde
    05.45.24.0039

  • Intel B760

    HW
    Intel
    all versions

  • Intel C262

    HW
    Intel
    all versions

  • Intel C266

    HW
    Intel
    all versions

  • Intel Core I3 1305u

    HW
    Intel
    all versions

  • Intel Core I3 13100

    HW
    Intel
    all versions

  • Intel Core I3 13100e

    HW
    Intel
    all versions

  • Intel Core I3 13100f

    HW
    Intel
    all versions

  • Intel Core I3 13100t

    HW
    Intel
    all versions

  • Intel Core I3 13100te

    HW
    Intel
    all versions

  • Intel Core I3 1315u

    HW
    Intel
    all versions

  • Intel Core I3 1315ue

    HW
    Intel
    all versions

  • Intel Core I3 1315ure

    HW
    Intel
    all versions

  • Intel Core I3 1320pe

    HW
    Intel
    all versions

  • Intel Core I3 1320pre

    HW
    Intel
    all versions

  • Intel Core I3 13300he

    HW
    Intel
    all versions

  • Intel Core I3 13300hre

    HW
    Intel
    all versions

  • Intel Core I5 1334u

    HW
    Intel
    all versions

  • Intel Core I5 1335u

    HW
    Intel
    all versions

  • Intel Core I5 1335ue

    HW
    Intel
    all versions

  • Intel Core I5 13400

    HW
    Intel
    all versions

  • Intel Core I5 13400e

    HW
    Intel
    all versions

  • Intel Core I5 13400f

    HW
    Intel
    all versions

  • Intel Core I5 13400t

    HW
    Intel
    all versions

  • Intel Core I5 1340p

    HW
    Intel
    all versions

  • Intel Core I5 1340pe

    HW
    Intel
    all versions

  • Intel Core I5 13420h

    HW
    Intel
    all versions

  • Intel Core I5 13450hx

    HW
    Intel
    all versions

  • Intel Core I5 1345u

    HW
    Intel
    all versions

  • Intel Core I5 1345ue

    HW
    Intel
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2021-41842CRITICAL9.8PL ✓same product

RCE w Insyde InsydeH2O — brak weryfikacji CommBuffer w SMI handler

CVE-2024-55567HIGH7.5same product

Improper input validation was discovered in UsbCoreDxe in Insyde InsydeH2O kernel 5.4 before 05.47.01, 5.5 bef...

CVE-2024-52877HIGH7.5same product

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.3...

CVE-2024-52878HIGH7.5same product

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.3...

CVE-2024-52879HIGH7.5same product

An issue was discovered in Insyde InsydeH2O kernel 5.2 before version 05.29.50, kernel 5.3 before version 05.3...