Insyde's Security Pledge
Insyde Security Advisory 2022025
| Insyde ID | Advisory Category | Impact of Vulnerability | Severity Rating | Original Date | Last Revised |
| INSYDE-SA-2022025 | Software | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:T | 7.8 | 02/21/2022 | 02/21/2022 |
Summary:
HDD password is stored in plaintext.
Vulnerability Details
This issue corresponds to CVE-2021-38489. It affects the HddPasswordPei driver. It was fixed in the InsydeH2O kernel: Kernel 5.1: 05.17.03, Kernel 5.2: 05.27.03, Kernel 5.3: 05.36.03, Kernel 5.4: 05.43.51, Kernel 5.5: 05.51.51
Revision History:
| Revision | Date | Description |
| 1.0 | 02/21/2022 | Initial Release |
| - | - | - |