Insyde's Security Pledge
Recent Security Advisories

INSYDE-SA-2023067
Product
CVSS Score
Original Date
Last Revised
InsydeH2O
4.7
2024-04-09
Summary
PnpSmm: Possible out of bounds in SMM communication buffer, leading to tampering.
Vulnerability Details
CVSS Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
CVE-2023-47252: The PNP software SMI sub-functions do not verify data size which could lead to data tampering.
Solution Information
kernel 5.2: Version in 05.28.45
kernel 5.3: Version in 05.37.45
kernel 5.4: Version in 05.45.45
kernel 5.5: Version in 05.53.45
kernel 5.6: Version in 05.60.45
Acknowledgements
Revision History
Revision #
Date
Description
1
2024-04-09
Initial Release