Insyde's Security Pledge
Insyde Security Advisory 2023067
| Insyde ID | Advisory Category | Impact of Vulnerability | Severity Rating | Original Date | Last Revised |
| INSYDE-SA-2023067 | Software | CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N | 4.7 | 04/09/2024 | 04/09/2024 |
Summary:
PnpSmm: Possible out of bounds in SMM communication buffer, leading to tampering.
Vulnerability Details:
CVE-2023-47252: The PNP software SMI sub-functions do not verify data size which could lead to data tampering.
Solution Information:
kernel 5.2: Version in 05.28.45
kernel 5.3: Version in 05.37.45
kernel 5.4: Version in 05.45.45
kernel 5.5: Version in 05.53.45
kernel 5.6: Version in 05.60.45
Revision History:
| Revision | Date | Description |
| 1.0 | 04/09/2024 | Initial Release |
| - | - | - |