Insyde's Security Pledge

Recent Security Advisories

INSYDE-SA-2023050

Product

CVSS Score

Original Date

Last Revised

InsydeH2O

6.7

2023-07-11

Summary

Secure Boot Security Feature Bypass Vulnerability.

Vulnerability Details

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVE-2023-24932

An attacker who has physical access or Administrative rights to a target device could install an affected boot policy which could bypass Security Boot.

Solution Information

kernel 5.2: Version 05.28.20
kernel 5.3: Version 05.37.20
kernel 5.4: Version 05.45.20
kernel 5.5: Version 05.53.20
kernel 5.6: Version 05.60.20

Acknowledgements

Revision History

Revision #

Date

Description

1

2023-07-11

Initial Release