SSA-450613

csafDEsiemens_psirt

SSA-450613: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family

Advisory ansehen veröffentlicht 2023-02-14

Insyde has published information on vulnerabilities in Insyde BIOS on November 8th 2022. These vulnerabilities also affect the RUGGEDCOM APE1808 product family. Siemens has released updates for the affected products and recommends to update to the latest versions.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-33984UShigh7.0—
DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are…
CVE-2022-33908UShigh7.0—
DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are…
CVE-2022-33906USmedium6.4—
DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions whic…
CVE-2022-31243USmedium6.4—
Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesRuntimeDxe driver could cause SMRAM corru…
CVE-2022-30774USmedium6.4—
DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) DMA atta…
CVE-2022-33982USmedium6.4—
DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM. DMA attacks o…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (132)

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan