VulnerabilityModified

CVE-2020-5953

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM.

HIGH 7.5EPSS 0.28%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.28%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS: 0.28% probability · 21th percentile
CISA KEV: Not listed
Affected: insyde/insydeh2o · siemens/ruggedcom ape1808 firmware · siemens/simatic field pg m6 firmware · siemens/simatic ipc127e firmware · siemens/simatic ipc227g firmware · siemens/simatic ipc277g firmware · siemens/simatic itp1000 firmware · siemens/simatic ipc477e pro firmware · siemens/simatic ipc627e firmware · siemens/simatic ipc647e firmware · siemens/simatic ipc677e firmware · siemens/simatic ipc847e firmware · siemens/simatic ipc327g firmware · siemens/simatic ipc377g firmware · siemens/simatic ipc427e firmware · siemens/simatic ipc477e firmware · siemens/simatic field pg m5 firmware
Source: cve@mitre.org

References

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
https://security.netapp.com/advisory/ntap-20220222-0005/Third Party Advisory
https://www.insyde.com/productsProduct, Vendor Advisory
https://www.insyde.com/security-pledgeVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
https://security.netapp.com/advisory/ntap-20220222-0005/Third Party Advisory
https://www.insyde.com/productsProduct, Vendor Advisory
https://www.insyde.com/security-pledgeVendor Advisory
https://www.kb.cert.org/vuls/id/796611
https://cert-portal.siemens.com/productcert/html/ssa-306654.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.