CVE Vulnerability

CVE-2020-5953

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).

6.9 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 3.4 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

7.5 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 6

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.insyde.com/security-pledge Vendor Advisory
https://www.insyde.com/products Product Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf Third Party Advisory
https://security.netapp.com/advisory/ntap-20220222-0005/ Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:insyde:insydeh2o:5.34.03.0029:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:5.23.45.0023:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:5.23.04.0045:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:5.42.03.0010:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:5.33.15.0034:*:*:*:*:*:*:*
cpe:2.3:a:insyde:insydeh2o:5.12.09.0074:*:*:*:*:*:*:*
Information

Published : 2022-02-03 01:15

Updated : 2022-04-12 06:17

NVD link : CVE-2020-5953

Mitre link : CVE-2020-5953

Products Affected

Siemens

Simatic Field Pg M5 Firmware

CWE
NVD-CWE-noinfo