ICSA-23-047-08

icsaUScisa_csaf_ot

Siemens RUGGEDCOM APE1808

view advisory published 2023-02-14

Insyde has published information on vulnerabilities in Insyde BIOS on November 8th 2022. These vulnerabilities also affect the RUGGEDCOM APE1808 product family. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2022-33984UShigh7.0—
DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are…
CVE-2022-33908UShigh7.0—
DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are…
CVE-2022-33906USmedium6.4—
DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions whic…
CVE-2022-31243USmedium6.4—
Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesRuntimeDxe driver could cause SMRAM corru…
CVE-2022-30774USmedium6.4—
DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) DMA atta…
CVE-2022-33982USmedium6.4—
DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM. DMA attacks o…
02

references

External citations — patches, advisories, analysis.

03

remediations (132)

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan