CVE-2022-35893

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5

High · published September 23, 2022

CVSS v3.1
8.2
EPSS
0%
Percentile
13.0
In the wild
Unconfirmed
What it is

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00230 · 13.0th percentile
Published
2022-09-23T18:01Z
EPSS history
Timeline
  • 23 SEP 18:01Z
    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5
    cvelistv5