← Volver a CVEs

CVE-2021-45969

HIGH

8.2

Descripcion

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location).

Detalles CVE

Puntuacion CVSS v3.18.2

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosHIGH

Interaccion usuarioNONE

Publicado1/5/2022

Ultima modificacion11/4/2025

Fuentenvd

Avistamientos honeypot0

Productos afectados

insyde:insydeh2o

Debilidades (CWE)

CWE-787

Referencias

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf(cve@mitre.org)

https://security.netapp.com/advisory/ntap-20220216-0004/(cve@mitre.org)

https://www.insyde.com/security-pledge(cve@mitre.org)

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf(af854a3a-2127-422b-91ae-364da2661108)

https://security.netapp.com/advisory/ntap-20220216-0004/(af854a3a-2127-422b-91ae-364da2661108)

https://www.insyde.com/security-pledge(af854a3a-2127-422b-91ae-364da2661108)

https://www.kb.cert.org/vuls/id/796611(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.