« Volver al listado

CVE-2023-22612

Estado: ModificadaAlta (8.8)—

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed arguments, resulting in memory corruption in SMM.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Insyde — Insydeh2o

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-22612",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-22612",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-02-11T17:17:38.131459Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-04-11T21:15:17.627",
  "references": [
    {
      "url": "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
      "tags": [
        "Not Applicable"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.insyde.com/security-pledge",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.insyde.com/security-pledge/SA-2023019",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/",
      "tags": [
        "Not Applicable"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.insyde.com/security-pledge",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.insyde.com/security-pledge/SA-2023019",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed arguments, resulting in memory corruption in SMM."
    }
  ],
  "lastModified": "2026-06-17T05:35:43.677",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:05.0a.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C5460231-7E69-4C57-B181-C18A939ED15D"
            },
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:05.18.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F0EF705B-3C79-4972-9E28-BD19B3145598"
            },
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:05.28.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5E32BE0E-BA2B-48E3-B9DA-9DDD625FFED0"
            },
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:05.37.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCF923E3-CC99-454A-921F-50C29CAE4EDD"
            },
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:05.45.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5D1DE977-6288-4AC8-8A07-1025422E94FF"
            },
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:05.53.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB625C43-BC20-42DF-991A-83BFF79B45AC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}