Insyde's Security Pledge
Recent Security Advisories
INSYDE-SA-2023039
Product
CVSS Score
Original Date
Last Revised
InsydeH2O
6.1
2023-07-11
Summary
FvbServicesRuntimeDxe: Exposes an SMI handler that allows an attacker to interact with the SPI flash.
Vulnerability Details
CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L
The FvbServicesRuntimeDxe SMM module exposes an SMI handler that allows an attacker to interact with the SPI flash at run-time from the OS.
Solution Information
kernel 5.2: Version 05.28.23
kernel 5.3: Version 05.37.23
kernel 5.4: Version 05.45.23
kernel 5.5: Version 05.53.23
Acknowledgements
Revision History
Revision #
Date
Description
1
2023-07-11
Initial Release