An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate information contained in the 'MeSetup' UEFI variable. On some systems, this variable can be overwritten using operating system APIs. Exploitation of this vulnerability could potentially lead to denial of service for the platform.
References
| Link | Resource |
|---|---|
| https://www.insyde.com/security-pledge/SA-2023036 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Aug 2023, 16:14
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Insyde
Insyde insydeh2o |
|
| CPE | cpe:2.3:a:insyde:insydeh2o:5.3:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:5.0:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:5.1:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:5.5:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:5.2:*:*:*:*:*:*:* cpe:2.3:a:insyde:insydeh2o:5.4:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://www.insyde.com/security-pledge/SA-2023036 - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
18 Aug 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-18 19:15
Updated : 2023-08-24 16:14
NVD link : CVE-2023-27471
Mitre link : CVE-2023-27471
JSON object : View
Products Affected
insyde
- insydeh2o
CWE