Insyde InsydeH2O

Name: Insyde InsydeH2O
Brand: Insyde

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical9high2medium0low

updated 2026-10-28

vulnerabilities (13)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-40238US	medium5.5OT elevated	1.84% (79th)	—	no fix	2023-12-07	5 versions
CVE-2024-49200US	—	0.46% (40th)	—	no fix	2025-04-15	6 versions
CVE-2023-22614US	high8.8	0.38% (32nd)	—	no fix	2023-04-11	8 versions
CVE-2023-31041US	high7.5OT elevated	0.36% (30th)	—	no fix	2023-08-14	5 versions
CVE-2021-42554US	high8.2	0.33% (26th)	—	no fix	2022-02-03	6 versions
CVE-2021-45970US	high8.2	0.33% (26th)	—	no fix	2022-01-05	5 versions
CVE-2022-24030US	high7.5	0.30% (23rd)	—	no fix	2022-02-03	6 versions
CVE-2021-45971US	high8.2	0.28% (20th)	—	no fix	2022-01-06	5 versions
CVE-2021-45969US	high8.2	0.28% (20th)	—	no fix	2022-01-05	5 versions
CVE-2023-30633US	medium5.3	0.24% (15th)	—	no fix	2023-10-19	5 versions
CVE-2023-22612US	high8.8	0.23% (14th)	—	no fix	2023-04-11	6 versions
CVE-2023-22615US	high8.4	0.20% (10th)	—	no fix	2023-04-11	3 versions
CVE-2023-28149US	—	0.13% (3rd)	—	no fix	2024-07-31	5 versions

The flaw types (CWEs) most of these CVEs share.

CWE-787Out-of-bounds Write10 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-312Cleartext Storage of Sensitive Information2 CVEs
CWE-122Heap-based Buffer Overflow1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-254CWE-2541 CVEs
CWE-256Plaintext Storage of a Password1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.