DeutschShown in its original language — a full translation is planned for a future version.
Insyde UEFI Firmware: Mehrere Schwachstellen
view advisory published 2023-06-13
Ein Angreifer kann mehrere Schwachstellen in Insyde UEFI Firmware ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-46897US | — | — | ||
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The CapsuleIFWUSmm driver does not check the return value from a method or function. This can prevent it fr… | ||||
| CVE-2021-38576US | high7.5 | — | ||
A BIOS bug in firmware for a particular PC model leaves the Platform authorization value empty. This can be used to permanently brick the TPM in multiple ways, as well as to non-pe… | ||||
| CVE-2023-26090US | — | — | ||
02
references
External citations — patches, advisories, analysis.
- Debian Security Advisory DLA-4207 vom 2025-06-05external
- Fujitsu PSIRT Security Notice FCCL-IS-2023-072400 vom 2023-10-09external
- Lenovo Security Advisory LEN-134879 vom 2023-08-09external
- WID-SEC-W-2023-1451 - CSAF Versionself
- WID-SEC-2023-1451 - Portal Versionself
- Insyde Software Security Advisories for InsydeH2O UEFI BIOS vom 2023-06-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan