Non notée
CVE-2020-5953 A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI…
Description
A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| n/a | Versions non publiées | |
| SIMATIC Field PG M5 22.01 | premières → < 22.01.10 | 22.01.10 |
| SIMATIC Field PG M6 26.01 | premières → < 26.01.13 | 26.01.13 |
| SIMATIC IPC127E 27.01 | premières → < 27.01.09 | 27.01.09 |
| SIMATIC IPC227G 28.01 | premières → < 28.01.04 | 28.01.04 |
| SIMATIC IPC277G 28.01 | premières → < 28.01.04 | 28.01.04 |
| SIMATIC IPC277G PRO 28.01 | premières → < 28.01.04 | 28.01.04 |
| SIMATIC IPC327G 28.01 | premières → < 28.01.04 | 28.01.04 |
| SIMATIC IPC377G 28.01 | premières → < 28.01.04 | 28.01.04 |
Afficher les 9 autres branches Masquer les 9 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SIMATIC IPC427E 21.01 | premières → < 21.01.17 | 21.01.17 |
| SIMATIC IPC477E 21.01 | premières → < 21.01.17 | 21.01.17 |
| SIMATIC IPC477E PRO 21.01 | premières → < 21.01.17 | 21.01.17 |
| SIMATIC IPC627E 25.02 | premières → < 25.02.12 | 25.02.12 |
| SIMATIC IPC647E 25.02 | premières → < 25.02.12 | 25.02.12 |
| SIMATIC IPC677E 25.02 | premières → < 25.02.12 | 25.02.12 |
| SIMATIC IPC847E 25.02 | premières → < 25.02.12 | 25.02.12 |
| SIMATIC ITP1000 23.01 | premières → < 23.01.10 | 23.01.10 |
| SIPLUS IPC427E 21.01 | premières → < 21.01.17 | 21.01.17 |
Références
- www.insyde.com www.insyde.com
- www.insyde.com www.insyde.com
- cert-portal.siemens.com cert-portal.siemens.com
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de n/a
Les 144658 CVE de n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Non notée
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Non notée
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Non notée
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Non notée