Insyde's Security Pledge

Recent Security Advisories

INSYDE-SA-2023067

Product

CVSS Score

Original Date

Last Revised

InsydeH2O

4.7

2024-04-09

Summary

PnpSmm: Possible out of bounds in SMM communication buffer, leading to tampering.

Vulnerability Details

CVSS Vector: CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N

CVE-2023-47252: The PNP software SMI sub-functions do not verify data size which could lead to data tampering.

Solution Information

kernel 5.2: Version in 05.28.45
kernel 5.3: Version in 05.37.45
kernel 5.4: Version in 05.45.45
kernel 5.5: Version in 05.53.45
kernel 5.6: Version in 05.60.45

Acknowledgements

Revision History

Revision #

Date

Description

1

2024-04-09

Initial Release