Vulnerability-Lookup

CVE-2021-42554 (GCVE-0-2021-42554)

Vulnerability from cvelistv5 – Published: 2022-02-03 01:40 – Updated: 2026-08-11 12:22

Summary

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

Severity

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE

Assigner

mitre

References

6 references

URL	Tags
https://www.insyde.com/security-pledge	x_refsource_MISC
https://www.insyde.com/security-pledge/SA-2022012	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM
https://cert-portal.siemens.com/productcert/pdf/s…	x_refsource_CONFIRM
https://www.kb.cert.org/vuls/id/796611
https://cert-portal.siemens.com/productcert/html/…

Impacted products

18 products

Vendor	Product	Version
Siemens	RUGGEDCOM APE1808 - BIOS	Affected: 0 , < V1.0.202N (custom)
Siemens	SIMATIC Field PG M5	Affected: 0 , < V22.01.10 (custom)
Siemens	SIMATIC Field PG M6	Affected: 0 , < V26.01.13 (custom)
Siemens	SIMATIC IPC127E	Affected: 0 , < V27.01.09 (custom)
Siemens	SIMATIC IPC227G	Affected: 0 , < V28.01.04 (custom)
Siemens	SIMATIC IPC277G	Affected: 0 , < V28.01.04 (custom)
Siemens	SIMATIC IPC277G PRO	Affected: 0 , < V28.01.04 (custom)
Siemens	SIMATIC IPC327G	Affected: 0 , < V28.01.04 (custom)
Siemens	SIMATIC IPC377G	Affected: 0 , < V28.01.04 (custom)
Siemens	SIMATIC IPC427E	Affected: 0 , < V21.01.17 (custom)
Siemens	SIMATIC IPC477E	Affected: 0 , < V21.01.17 (custom)
Siemens	SIMATIC IPC477E PRO	Affected: 0 , < V21.01.17 (custom)
Siemens	SIMATIC IPC627E	Affected: 0 , < V25.02.12 (custom)
Siemens	SIMATIC IPC647E	Affected: 0 , < V25.02.12 (custom)
Siemens	SIMATIC IPC677E	Affected: 0 , < V25.02.12 (custom)
Siemens	SIMATIC IPC847E	Affected: 0 , < V25.02.12 (custom)
Siemens	SIMATIC ITP1000	Affected: 0 , < V23.01.10 (custom)
Siemens	SIPLUS IPC427E	Affected: 0 , < V21.01.17 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T19:12:43.116Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.insyde.com/security-pledge"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.insyde.com/security-pledge/SA-2022012"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
          },
          {
            "url": "https://www.kb.cert.org/vuls/id/796611"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "RUGGEDCOM APE1808 - BIOS",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V1.0.202N",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Field PG M5",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V22.01.10",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC Field PG M6",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V26.01.13",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC127E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V27.01.09",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC227G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC277G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC\u00a0IPC277G PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC327G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC377G",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V28.01.04",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC427E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21.01.17",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC477E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21.01.17",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC477E PRO",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21.01.17",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC627E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V25.02.12",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC647E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V25.02.12",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC677E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V25.02.12",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC IPC847E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V25.02.12",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC ITP1000",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V23.01.10",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          },
          {
            "defaultStatus": "unknown",
            "product": "SIPLUS IPC427E",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "V21.01.17",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-11T12:22:18.229Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-306654.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-22T19:06:40.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.insyde.com/security-pledge"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.insyde.com/security-pledge/SA-2022012"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-42554",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.insyde.com/security-pledge",
              "refsource": "MISC",
              "url": "https://www.insyde.com/security-pledge"
            },
            {
              "name": "https://www.insyde.com/security-pledge/SA-2022012",
              "refsource": "MISC",
              "url": "https://www.insyde.com/security-pledge/SA-2022012"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220216-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf",
              "refsource": "CONFIRM",
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-42554",
    "datePublished": "2022-02-03T01:40:56.000Z",
    "dateReserved": "2021-10-18T00:00:00.000Z",
    "dateUpdated": "2026-08-11T12:22:18.229Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2021-42554",
      "date": "2026-08-14",
      "epss": "0.00327",
      "percentile": "0.25448"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.0\", \"versionEndExcluding\": \"5.08.42\", \"matchCriteriaId\": \"F0BA9E3E-930F-4EE7-B652-8746B2E3D7EE\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.1\", \"versionEndExcluding\": \"5.16.42\", \"matchCriteriaId\": \"A4803E0A-D93A-4863-B9F6-378C3D73F743\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.2\", \"versionEndExcluding\": \"5.26.42\", \"matchCriteriaId\": \"65D09B40-7B64-4890-AEA5-AE1EB5201CA1\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.3\", \"versionEndExcluding\": \"5.35.42\", \"matchCriteriaId\": \"E38FAADD-CEC5-421F-BBD7-1152B95B2A10\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.4\", \"versionEndExcluding\": \"5.42.51\", \"matchCriteriaId\": \"5536AD0D-EE19-41C7-BC57-69EAF77D6E8C\"}]}]}, {\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"5.5\", \"versionEndExcluding\": \"5.50.51\", \"matchCriteriaId\": \"C140942E-1DC5-4491-8BB6-7FF6960A216D\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"324ADC7E-AECD-4B7D-8571-5399542C2BF6\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"506DEE00-30D2-4E29-9645-757EB8778C0F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"480C5657-5C05-40F5-B76A-E67119727ED8\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"8F3C3E60-7C36-4F5D-B454-97C9D0FD9459\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc127e_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2AEB5AD1-3973-4150-BEA2-C9DE0B98222F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc127e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F63C0B17-60E2-4240-92FD-4B7C7D8F2C8B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc227g_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"C3F52F29-0ACF-4ECC-927A-0CB27399E5D9\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc227g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"0D1E85AC-1305-4C5E-AD8B-39B2654F6057\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc277g_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F203C449-2B5C-47A1-BF3D-8DCFD29F0B18\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc277g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"320F5752-86B3-4C08-89D0-02272753A6D0\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc327g_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A37FB5EC-BB64-472C-81FC-8EEF238E3C12\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc327g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"EC7303D1-CC95-42C7-B843-C3B3B3336669\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc377g_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"45013BCA-3897-4D58-81FA-D8CB9D19268C\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc377g:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FDD6F034-BC50-4223-AE5D-319F04C866A8\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F6422BF3-01B7-443B-BD2B-80E45D7C3F5F\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"A40D0CDB-7BE6-491F-B730-3B4E10CA159A\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"696F47E6-C1CA-4A58-A91F-4B3EA92954AF\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"FDF9D4C3-1892-48FA-95B4-835B636A4005\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"F712060C-ECDB-4BC7-B9B9-468B41DE615B\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"9D9AF082-8345-4BE1-B1FC-6E0316BB833B\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"D511C170-65E5-416D-B7CE-557A503F25AE\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E430C4C5-D887-47C6-B50F-66EEE9519151\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"577C19F5-82ED-46DF-91CC-A074DE99EBDD\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"5F9FA42D-B2F0-456F-89B7-6A5789787FBA\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"CEF4592C-5DB3-45F4-B354-59701BBA0C08\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1157418C-14C4-43C4-B63E-7E98D868A94F\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"87F0538B-ED6E-40C7-9C2A-4C5DC3D2935E\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"187C6D51-5B86-484D-AE0F-26D1C9465580\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:*:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"ABE0A54C-AEB3-4B1D-AD5D-F9239709B052\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"B89A6863-B602-4404-8D26-337FECABFFF0\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.\"}, {\"lang\": \"es\", \"value\": \"Se ha descubierto un problema en InsydeH2O con el Kernel versi\\u00f3n 5.0 antes de 05.08.42, el Kernel 5.1 antes de 05.16.42, el Kernel versi\\u00f3n 5.2 antes de 05.26.42, el Kernel versi\\u00f3n 5.3 antes de 05.35.42, el Kernel versi\\u00f3n 5.4 antes de 05.42.51 y el Kernel versi\\u00f3n 5.5 antes de 05.50.51. Una vulnerabilidad de corrupci\\u00f3n de memoria SMM en FvbServicesRuntimeDxe permite a un posible atacante escribir datos fijos o predecibles en la SMRAM. La explotaci\\u00f3n de este problema podr\\u00eda llevar a escalar privilegios a SMM.\"}]",
      "id": "CVE-2021-42554",
      "lastModified": "2024-11-21T06:27:47.840",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\", \"baseScore\": 8.2, \"baseSeverity\": \"HIGH\", \"attackVector\": \"LOCAL\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"HIGH\", \"userInteraction\": \"NONE\", \"scope\": \"CHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 1.5, \"impactScore\": 6.0}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:L/AC:L/Au:N/C:C/I:C/A:C\", \"baseScore\": 7.2, \"accessVector\": \"LOCAL\", \"accessComplexity\": \"LOW\", \"authentication\": \"NONE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 3.9, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2022-02-03T02:15:07.380",
      "references": "[{\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20220216-0007/\", \"source\": \"cve@mitre.org\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.insyde.com/security-pledge\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.insyde.com/security-pledge/SA-2022012\", \"source\": \"cve@mitre.org\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://security.netapp.com/advisory/ntap-20220216-0007/\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\"]}, {\"url\": \"https://www.insyde.com/security-pledge\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://www.insyde.com/security-pledge/SA-2022012\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-787\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2021-42554\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2022-02-03T02:15:07.380\",\"lastModified\":\"2026-08-11T13:17:21.767\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.\"},{\"lang\":\"es\",\"value\":\"Se ha descubierto un problema en InsydeH2O con el Kernel versi\u00f3n 5.0 antes de 05.08.42, el Kernel 5.1 antes de 05.16.42, el Kernel versi\u00f3n 5.2 antes de 05.26.42, el Kernel versi\u00f3n 5.3 antes de 05.35.42, el Kernel versi\u00f3n 5.4 antes de 05.42.51 y el Kernel versi\u00f3n 5.5 antes de 05.50.51. Una vulnerabilidad de corrupci\u00f3n de memoria SMM en FvbServicesRuntimeDxe permite a un posible atacante escribir datos fijos o predecibles en la SMRAM. La explotaci\u00f3n de este problema podr\u00eda llevar a escalar privilegios a SMM.\"}],\"affected\":[{\"source\":\"cve@mitre.org\",\"affectedData\":[{\"vendor\":\"n/a\",\"product\":\"n/a\",\"versions\":[{\"version\":\"n/a\",\"status\":\"affected\"}]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM APE1808 - BIOS\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V1.0.202N\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC Field PG M5\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V22.01.10\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC Field PG M6\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V26.01.13\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC127E\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V27.01.09\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC227G\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V28.01.04\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC277G\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V28.01.04\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC\u00a0IPC277G PRO\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V28.01.04\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC327G\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V28.01.04\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC377G\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V28.01.04\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC427E\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V21.01.17\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC477E\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V21.01.17\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC477E PRO\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V21.01.17\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC627E\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V25.02.12\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC647E\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V25.02.12\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC677E\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V25.02.12\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC IPC847E\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V25.02.12\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIMATIC ITP1000\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V23.01.10\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Siemens\",\"product\":\"SIPLUS IPC427E\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V21.01.17\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"HIGH\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.5,\"impactScore\":6.0}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:C/I:C/A:C\",\"baseScore\":7.2,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":3.9,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.0\",\"versionEndExcluding\":\"5.08.42\",\"matchCriteriaId\":\"F0BA9E3E-930F-4EE7-B652-8746B2E3D7EE\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.1\",\"versionEndExcluding\":\"5.16.42\",\"matchCriteriaId\":\"A4803E0A-D93A-4863-B9F6-378C3D73F743\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.2\",\"versionEndExcluding\":\"5.26.42\",\"matchCriteriaId\":\"65D09B40-7B64-4890-AEA5-AE1EB5201CA1\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.3\",\"versionEndExcluding\":\"5.35.42\",\"matchCriteriaId\":\"E38FAADD-CEC5-421F-BBD7-1152B95B2A10\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.4\",\"versionEndExcluding\":\"5.42.51\",\"matchCriteriaId\":\"5536AD0D-EE19-41C7-BC57-69EAF77D6E8C\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.50.51\",\"matchCriteriaId\":\"C140942E-1DC5-4491-8BB6-7FF6960A216D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"324ADC7E-AECD-4B7D-8571-5399542C2BF6\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"506DEE00-30D2-4E29-9645-757EB8778C0F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"480C5657-5C05-40F5-B76A-E67119727ED8\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8F3C3E60-7C36-4F5D-B454-97C9D0FD9459\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc127e_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2AEB5AD1-3973-4150-BEA2-C9DE0B98222F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc127e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F63C0B17-60E2-4240-92FD-4B7C7D8F2C8B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc227g_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"C3F52F29-0ACF-4ECC-927A-0CB27399E5D9\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc227g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D1E85AC-1305-4C5E-AD8B-39B2654F6057\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc277g_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F203C449-2B5C-47A1-BF3D-8DCFD29F0B18\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc277g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"320F5752-86B3-4C08-89D0-02272753A6D0\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc327g_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A37FB5EC-BB64-472C-81FC-8EEF238E3C12\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc327g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EC7303D1-CC95-42C7-B843-C3B3B3336669\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc377g_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"45013BCA-3897-4D58-81FA-D8CB9D19268C\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc377g:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDD6F034-BC50-4223-AE5D-319F04C866A8\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6422BF3-01B7-443B-BD2B-80E45D7C3F5F\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A40D0CDB-7BE6-491F-B730-3B4E10CA159A\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"696F47E6-C1CA-4A58-A91F-4B3EA92954AF\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FDF9D4C3-1892-48FA-95B4-835B636A4005\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F712060C-ECDB-4BC7-B9B9-468B41DE615B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9D9AF082-8345-4BE1-B1FC-6E0316BB833B\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D511C170-65E5-416D-B7CE-557A503F25AE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E430C4C5-D887-47C6-B50F-66EEE9519151\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"577C19F5-82ED-46DF-91CC-A074DE99EBDD\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5F9FA42D-B2F0-456F-89B7-6A5789787FBA\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CEF4592C-5DB3-45F4-B354-59701BBA0C08\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1157418C-14C4-43C4-B63E-7E98D868A94F\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"87F0538B-ED6E-40C7-9C2A-4C5DC3D2935E\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"187C6D51-5B86-484D-AE0F-26D1C9465580\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ABE0A54C-AEB3-4B1D-AD5D-F9239709B052\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"B89A6863-B602-4404-8D26-337FECABFFF0\"}]}]}],\"references\":[{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20220216-0007/\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.insyde.com/security-pledge\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.insyde.com/security-pledge/SA-2022012\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.netapp.com/advisory/ntap-20220216-0007/\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://www.insyde.com/security-pledge\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.insyde.com/security-pledge/SA-2022012\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.kb.cert.org/vuls/id/796611\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-306654.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\"}]}}",
    "redhat_vex": {
      "current_release_date": "2025-05-29T05:06:29+00:00",
      "cve": "CVE-2021-42554",
      "id": "CVE-2021-42554",
      "initial_release_date": "2021-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2021-42554",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2021/cve-2021-42554.json",
      "version": "3"
    }
  }
}

CERTFR-2022-AVI-180

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans Siemens . Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Siemens	N/A	SIMATIC IPC327G toutes versions
Siemens	N/A	SIMATIC IPC847E toutes versions
Siemens	N/A	SIMATIC ITP1000 toutes versions
Siemens	N/A	SIMATIC IPC277G toutes versions
Siemens	N/A	SIMATIC IPC427E toutes versions
Siemens	N/A	SIMATIC IPC477E toutes versions
Siemens	N/A	SIMATIC IPC227G toutes versions
Siemens	N/A	SIMATIC IPC377G toutes versions
Siemens	N/A	SIMATIC IPC627E toutes versions
Siemens	N/A	SIMATIC IPC647E toutes versions
Siemens	N/A	SIMATIC IPC127E toutes versions
Siemens	N/A	SIMATIC Field PG M6 toutes versions
Siemens	N/A	SIMATIC Field PG M5 toutes versions
Siemens	N/A	SIMATIC IPC677E toutes versions

References

Title

Publication Time

Tags

Bulletin de sécurité Siemens ssa-306654 du 22 février 2022	None	vendor-advisory
Bulletin de sécurité Insyde du 01 février 2022	-	other
Bulletin d'actualité CERT-FR CERTFR-2022-ACT-005 du 07 février 2022	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SIMATIC IPC327G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC847E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC ITP1000 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC277G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC427E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC477E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC227G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC377G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC627E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC647E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC127E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC Field PG M6 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC Field PG M5 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC677E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-43615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43615"
    },
    {
      "name": "CVE-2021-42113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42113"
    },
    {
      "name": "CVE-2021-41838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41838"
    },
    {
      "name": "CVE-2022-24030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24030"
    },
    {
      "name": "CVE-2021-41840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41840"
    },
    {
      "name": "CVE-2021-45971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45971"
    },
    {
      "name": "CVE-2021-33627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33627"
    },
    {
      "name": "CVE-2021-41839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41839"
    },
    {
      "name": "CVE-2021-45970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45970"
    },
    {
      "name": "CVE-2021-43522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43522"
    },
    {
      "name": "CVE-2020-27339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27339"
    },
    {
      "name": "CVE-2021-41837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41837"
    },
    {
      "name": "CVE-2021-42059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42059"
    },
    {
      "name": "CVE-2022-24069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24069"
    },
    {
      "name": "CVE-2021-43323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43323"
    },
    {
      "name": "CVE-2020-5953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5953"
    },
    {
      "name": "CVE-2021-41841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41841"
    },
    {
      "name": "CVE-2021-42060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42060"
    },
    {
      "name": "CVE-2022-24031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24031"
    },
    {
      "name": "CVE-2021-33626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33626"
    },
    {
      "name": "CVE-2021-45969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45969"
    },
    {
      "name": "CVE-2021-33625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33625"
    },
    {
      "name": "CVE-2021-42554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42554"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Insyde du 01 f\u00e9vrier 2022",
      "url": "https://www.insyde.com/security-pledge"
    },
    {
      "title": "Bulletin d\u0027actualit\u00e9 CERT-FR CERTFR-2022-ACT-005 du 07 f\u00e9vrier 2022",
      "url": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2022-ACT-005/"
    }
  ],
  "reference": "CERTFR-2022-AVI-180",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-02-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Siemens . Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Siemens",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-306654 du 22 f\u00e9vrier 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-306654.html"
    }
  ]
}

CERTFR-2023-AVI-0559

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les commutateurs Aruba. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur, une exécution de code arbitraire et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les commutateurs Aruba séries CX 8400, CX 8325 et CX 8320 avec les systèmes d'exploitation suivants :

AOS-CX versions 10.12.x antérieures à 10.12.0006
AOS-CX versions 10.11.x antérieures à 10.11.0001
AOS-CX versions 10.10.x antérieures à 10.10.1000
AOS-CX versions 10.06.x antérieures à 10.06.0210

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Aruba ARUBA-PSA-2022-001 du 01 février 2023

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eLes commutateurs Aruba s\u00e9ries CX 8400, CX 8325 et CX 8320 avec les syst\u00e8mes d\u0027exploitation suivants :\u003c/p\u003e \u003cul\u003e \u003cli\u003eAOS-CX versions 10.12.x ant\u00e9rieures \u00e0 10.12.0006\u003c/li\u003e \u003cli\u003eAOS-CX versions 10.11.x ant\u00e9rieures \u00e0 10.11.0001\u003c/li\u003e \u003cli\u003eAOS-CX versions 10.10.x ant\u00e9rieures \u00e0 10.10.1000\u003c/li\u003e \u003cli\u003eAOS-CX versions 10.06.x ant\u00e9rieures \u00e0 10.06.0210\u003c/li\u003e \u003c/ul\u003e ",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-42113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42113"
    },
    {
      "name": "CVE-2021-41838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41838"
    },
    {
      "name": "CVE-2021-41840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41840"
    },
    {
      "name": "CVE-2021-33627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33627"
    },
    {
      "name": "CVE-2021-41839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41839"
    },
    {
      "name": "CVE-2021-43522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43522"
    },
    {
      "name": "CVE-2020-27339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27339"
    },
    {
      "name": "CVE-2021-41610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41610"
    },
    {
      "name": "CVE-2021-41837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41837"
    },
    {
      "name": "CVE-2021-42059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42059"
    },
    {
      "name": "CVE-2021-43323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43323"
    },
    {
      "name": "CVE-2020-5953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5953"
    },
    {
      "name": "CVE-2021-41841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41841"
    },
    {
      "name": "CVE-2021-33626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33626"
    },
    {
      "name": "CVE-2021-33625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33625"
    },
    {
      "name": "CVE-2021-42554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42554"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0559",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-07-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les commutateurs\nAruba. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de\ns\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code arbitraire et\nune \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les commutateurs Aruba",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Aruba ARUBA-PSA-2022-001 du 01 f\u00e9vrier 2023",
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-001.txt"
    }
  ]
}

CERTFR-2022-AVI-180

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans Siemens . Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et une élévation de privilèges.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Siemens	N/A	SIMATIC IPC327G toutes versions
Siemens	N/A	SIMATIC IPC847E toutes versions
Siemens	N/A	SIMATIC ITP1000 toutes versions
Siemens	N/A	SIMATIC IPC277G toutes versions
Siemens	N/A	SIMATIC IPC427E toutes versions
Siemens	N/A	SIMATIC IPC477E toutes versions
Siemens	N/A	SIMATIC IPC227G toutes versions
Siemens	N/A	SIMATIC IPC377G toutes versions
Siemens	N/A	SIMATIC IPC627E toutes versions
Siemens	N/A	SIMATIC IPC647E toutes versions
Siemens	N/A	SIMATIC IPC127E toutes versions
Siemens	N/A	SIMATIC Field PG M6 toutes versions
Siemens	N/A	SIMATIC Field PG M5 toutes versions
Siemens	N/A	SIMATIC IPC677E toutes versions

References

Title

Publication Time

Tags

Bulletin de sécurité Siemens ssa-306654 du 22 février 2022	None	vendor-advisory
Bulletin de sécurité Insyde du 01 février 2022	-	other
Bulletin d'actualité CERT-FR CERTFR-2022-ACT-005 du 07 février 2022	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "SIMATIC IPC327G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC847E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC ITP1000 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC277G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC427E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC477E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC227G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC377G toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC627E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC647E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC127E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC Field PG M6 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC Field PG M5 toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    },
    {
      "description": "SIMATIC IPC677E toutes versions",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Siemens",
          "scada": true
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-43615",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43615"
    },
    {
      "name": "CVE-2021-42113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42113"
    },
    {
      "name": "CVE-2021-41838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41838"
    },
    {
      "name": "CVE-2022-24030",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24030"
    },
    {
      "name": "CVE-2021-41840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41840"
    },
    {
      "name": "CVE-2021-45971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45971"
    },
    {
      "name": "CVE-2021-33627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33627"
    },
    {
      "name": "CVE-2021-41839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41839"
    },
    {
      "name": "CVE-2021-45970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45970"
    },
    {
      "name": "CVE-2021-43522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43522"
    },
    {
      "name": "CVE-2020-27339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27339"
    },
    {
      "name": "CVE-2021-41837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41837"
    },
    {
      "name": "CVE-2021-42059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42059"
    },
    {
      "name": "CVE-2022-24069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24069"
    },
    {
      "name": "CVE-2021-43323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43323"
    },
    {
      "name": "CVE-2020-5953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5953"
    },
    {
      "name": "CVE-2021-41841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41841"
    },
    {
      "name": "CVE-2021-42060",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42060"
    },
    {
      "name": "CVE-2022-24031",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-24031"
    },
    {
      "name": "CVE-2021-33626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33626"
    },
    {
      "name": "CVE-2021-45969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-45969"
    },
    {
      "name": "CVE-2021-33625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33625"
    },
    {
      "name": "CVE-2021-42554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42554"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Insyde du 01 f\u00e9vrier 2022",
      "url": "https://www.insyde.com/security-pledge"
    },
    {
      "title": "Bulletin d\u0027actualit\u00e9 CERT-FR CERTFR-2022-ACT-005 du 07 f\u00e9vrier 2022",
      "url": "https://www.cert.ssi.gouv.fr/actualite/CERTFR-2022-ACT-005/"
    }
  ],
  "reference": "CERTFR-2022-AVI-180",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2022-02-23T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans Siemens . Elles\npermettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire\n\u00e0 distance et une \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Siemens",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Siemens ssa-306654 du 22 f\u00e9vrier 2022",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-306654.html"
    }
  ]
}

CERTFR-2023-AVI-0559

Vulnerability from certfr_avis - Published: - Updated:

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les commutateurs Aruba séries CX 8400, CX 8325 et CX 8320 avec les systèmes d'exploitation suivants :

AOS-CX versions 10.12.x antérieures à 10.12.0006
AOS-CX versions 10.11.x antérieures à 10.11.0001
AOS-CX versions 10.10.x antérieures à 10.10.1000
AOS-CX versions 10.06.x antérieures à 10.06.0210

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Aruba ARUBA-PSA-2022-001 du 01 février 2023

None

vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eLes commutateurs Aruba s\u00e9ries CX 8400, CX 8325 et CX 8320 avec les syst\u00e8mes d\u0027exploitation suivants :\u003c/p\u003e \u003cul\u003e \u003cli\u003eAOS-CX versions 10.12.x ant\u00e9rieures \u00e0 10.12.0006\u003c/li\u003e \u003cli\u003eAOS-CX versions 10.11.x ant\u00e9rieures \u00e0 10.11.0001\u003c/li\u003e \u003cli\u003eAOS-CX versions 10.10.x ant\u00e9rieures \u00e0 10.10.1000\u003c/li\u003e \u003cli\u003eAOS-CX versions 10.06.x ant\u00e9rieures \u00e0 10.06.0210\u003c/li\u003e \u003c/ul\u003e ",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2021-42113",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42113"
    },
    {
      "name": "CVE-2021-41838",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41838"
    },
    {
      "name": "CVE-2021-41840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41840"
    },
    {
      "name": "CVE-2021-33627",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33627"
    },
    {
      "name": "CVE-2021-41839",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41839"
    },
    {
      "name": "CVE-2021-43522",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43522"
    },
    {
      "name": "CVE-2020-27339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-27339"
    },
    {
      "name": "CVE-2021-41610",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41610"
    },
    {
      "name": "CVE-2021-41837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41837"
    },
    {
      "name": "CVE-2021-42059",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42059"
    },
    {
      "name": "CVE-2021-43323",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-43323"
    },
    {
      "name": "CVE-2020-5953",
      "url": "https://www.cve.org/CVERecord?id=CVE-2020-5953"
    },
    {
      "name": "CVE-2021-41841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-41841"
    },
    {
      "name": "CVE-2021-33626",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33626"
    },
    {
      "name": "CVE-2021-33625",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33625"
    },
    {
      "name": "CVE-2021-42554",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-42554"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0559",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-07-19T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les commutateurs\nAruba. Elles permettent \u00e0 un attaquant de provoquer un probl\u00e8me de\ns\u00e9curit\u00e9 non sp\u00e9cifi\u00e9 par l\u0027\u00e9diteur, une ex\u00e9cution de code arbitraire et\nune \u00e9l\u00e9vation de privil\u00e8ges.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les commutateurs Aruba",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Aruba ARUBA-PSA-2022-001 du 01 f\u00e9vrier 2023",
      "url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-001.txt"
    }
  ]
}

BDU:2022-01022

Vulnerability from fstec - Published: 03.02.2022

Title

Уязвимость компонента FvbServicesRuntimeDxe фреймворка для создания UEFI-прошивок InsydeH2O, позволяющая нарушителю повысить свои привилегии

Description

Уязвимость компонента FvbServicesRuntimeDxe фреймворка для создания UEFI-прошивок InsydeH2O связана с записью за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии

Severity


                    
                      AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vendor

Insyde

Software Name

InsydeH2O

Software Version

от 5.0 до 5.08.42 (InsydeH2O), от 5.1 до 5.16.42 (InsydeH2O), от 5.2 до 5.26.42 (InsydeH2O), от 5.3 до 5.35.42 (InsydeH2O), от 5.4 до 5.42.51 (InsydeH2O), от 5.5 до 5.50.51 (InsydeH2O)

Possible Mitigations

Использование рекомендаций: https://www.insyde.com/security-pledge

Reference

https://www.insyde.com/security-pledge https://www.insyde.com/security-pledge/SA-2022012 https://security.netapp.com/advisory/ntap-20220216-0007/ https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf

CWE

CWE-787

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Insyde",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 5.0 \u0434\u043e 5.08.42 (InsydeH2O), \u043e\u0442 5.1 \u0434\u043e 5.16.42 (InsydeH2O), \u043e\u0442 5.2 \u0434\u043e 5.26.42 (InsydeH2O), \u043e\u0442 5.3 \u0434\u043e 5.35.42 (InsydeH2O), \u043e\u0442 5.4 \u0434\u043e 5.42.51 (InsydeH2O), \u043e\u0442 5.5 \u0434\u043e 5.50.51 (InsydeH2O)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.insyde.com/security-pledge",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "03.02.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "01.03.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "01.03.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-01022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2021-42554",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "InsydeH2O",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 FvbServicesRuntimeDxe \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a InsydeH2O, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0417\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-787)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 FvbServicesRuntimeDxe \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a InsydeH2O \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.insyde.com/security-pledge\nhttps://www.insyde.com/security-pledge/SA-2022012\nhttps://security.netapp.com/advisory/ntap-20220216-0007/\nhttps://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-787",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 10)\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 9,8)"
}

CNVD-2022-10277

Vulnerability from cnvd - Published: 2022-02-15

Title

Insyde InsydeH2O缓冲区溢出漏洞（CNVD-2022-10277）

Description

Insyde InsydeH2O是中国台湾系微（Insyde）公司的一个C语言源，它实现了新技术“EFI/UEFI”规范，旨在取代传统的BIOS（基本输入/输出系统）。 InsydeH2O Hardware-2-Operating System (H2O) UEFI固件存在缓冲区溢出漏洞攻击者可利用该漏洞将固定或可预测的数据写入SMRAM。

Severity

高

Patch Name

Insyde InsydeH2O缓冲区溢出漏洞（CNVD-2022-10277）的补丁

Patch Description

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://www.insyde.com/security-pledge

Reference

https://www.insyde.com/security-pledge

Impacted products

Name
['Insyde FvbServicesRuntimeDxe 05.08.42', 'Insyde FvbServicesRuntimeDxe 05.16.42', 'Insyde FvbServicesRuntimeDxe 05.26.42', 'Insyde FvbServicesRuntimeDxe 05.35.42', 'Insyde FvbServicesRuntimeDxe 05.42.51', 'Insyde FvbServicesRuntimeDxe 05.50.51']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-42554",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-42554"
    }
  },
  "description": "Insyde InsydeH2O\u662f\u4e2d\u56fd\u53f0\u6e7e\u7cfb\u5fae\uff08Insyde\uff09\u516c\u53f8\u7684\u4e00\u4e2aC\u8bed\u8a00\u6e90\uff0c\u5b83\u5b9e\u73b0\u4e86\u65b0\u6280\u672f\u201cEFI/UEFI\u201d\u89c4\u8303\uff0c\u65e8\u5728\u53d6\u4ee3\u4f20\u7edf\u7684BIOS\uff08\u57fa\u672c\u8f93\u5165/\u8f93\u51fa\u7cfb\u7edf\uff09\u3002\n\nInsydeH2O Hardware-2-Operating System (H2O) UEFI\u56fa\u4ef6\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5c06\u56fa\u5b9a\u6216\u53ef\u9884\u6d4b\u7684\u6570\u636e\u5199\u5165SMRAM\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.insyde.com/security-pledge",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-10277",
  "openTime": "2022-02-15",
  "patchDescription": "Insyde InsydeH2O\u662f\u4e2d\u56fd\u53f0\u6e7e\u7cfb\u5fae\uff08Insyde\uff09\u516c\u53f8\u7684\u4e00\u4e2aC\u8bed\u8a00\u6e90\uff0c\u5b83\u5b9e\u73b0\u4e86\u65b0\u6280\u672f\u201cEFI/UEFI\u201d\u89c4\u8303\uff0c\u65e8\u5728\u53d6\u4ee3\u4f20\u7edf\u7684BIOS\uff08\u57fa\u672c\u8f93\u5165/\u8f93\u51fa\u7cfb\u7edf\uff09\u3002\r\n\r\nInsydeH2O Hardware-2-Operating System (H2O) UEFI\u56fa\u4ef6\u5b58\u5728\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5c06\u56fa\u5b9a\u6216\u53ef\u9884\u6d4b\u7684\u6570\u636e\u5199\u5165SMRAM\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Insyde InsydeH2O\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2022-10277\uff09\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Insyde FvbServicesRuntimeDxe 05.08.42",
      "Insyde FvbServicesRuntimeDxe 05.16.42",
      "Insyde FvbServicesRuntimeDxe 05.26.42",
      "Insyde FvbServicesRuntimeDxe 05.35.42",
      "Insyde FvbServicesRuntimeDxe 05.42.51",
      "Insyde FvbServicesRuntimeDxe 05.50.51"
    ]
  },
  "referenceLink": "https://www.insyde.com/security-pledge",
  "serverity": "\u9ad8",
  "submitTime": "2022-02-09",
  "title": "Insyde InsydeH2O\u7f13\u51b2\u533a\u6ea2\u51fa\u6f0f\u6d1e\uff08CNVD-2022-10277\uff09"
}

FKIE_CVE-2021-42554

Vulnerability from fkie_nvd - Published: 2022-02-03 02:15 - Updated: 2026-06-17 04:09

Severity

8.2 (High) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Summary

References

URL	Tags
cve@mitre.org	https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf	Third Party Advisory
cve@mitre.org	https://security.netapp.com/advisory/ntap-20220216-0007/	Third Party Advisory
cve@mitre.org	https://www.insyde.com/security-pledge	Vendor Advisory
cve@mitre.org	https://www.insyde.com/security-pledge/SA-2022012	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://security.netapp.com/advisory/ntap-20220216-0007/	Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.insyde.com/security-pledge	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.insyde.com/security-pledge/SA-2022012	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.kb.cert.org/vuls/id/796611

Impacted products

Vendor	Product	Version
insyde	insydeh2o	*
insyde	insydeh2o	*
insyde	insydeh2o	*
insyde	insydeh2o	*
insyde	insydeh2o	*
insyde	insydeh2o	*
siemens	simatic_field_pg_m5_firmware	*
siemens	simatic_field_pg_m5	-
siemens	simatic_field_pg_m6_firmware	*
siemens	simatic_field_pg_m6	-
siemens	simatic_ipc127e_firmware	*
siemens	simatic_ipc127e	-
siemens	simatic_ipc227g_firmware	*
siemens	simatic_ipc227g	-
siemens	simatic_ipc277g_firmware	*
siemens	simatic_ipc277g	-
siemens	simatic_ipc327g_firmware	*
siemens	simatic_ipc327g	-
siemens	simatic_ipc377g_firmware	*
siemens	simatic_ipc377g	-
siemens	simatic_ipc427e_firmware	*
siemens	simatic_ipc427e	-
siemens	simatic_ipc477e_firmware	*
siemens	simatic_ipc477e	-
siemens	simatic_ipc627e_firmware	*
siemens	simatic_ipc627e	-
siemens	simatic_ipc647e_firmware	*
siemens	simatic_ipc647e	-
siemens	simatic_ipc677e_firmware	*
siemens	simatic_ipc677e	-
siemens	simatic_ipc847e_firmware	*
siemens	simatic_ipc847e	-
siemens	simatic_itp1000_firmware	*
siemens	simatic_itp1000	-
siemens	ruggedcom_ape1808_firmware	*
siemens	ruggedcom_ape1808	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0BA9E3E-930F-4EE7-B652-8746B2E3D7EE",
              "versionEndExcluding": "5.08.42",
              "versionStartIncluding": "5.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4803E0A-D93A-4863-B9F6-378C3D73F743",
              "versionEndExcluding": "5.16.42",
              "versionStartIncluding": "5.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "65D09B40-7B64-4890-AEA5-AE1EB5201CA1",
              "versionEndExcluding": "5.26.42",
              "versionStartIncluding": "5.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E38FAADD-CEC5-421F-BBD7-1152B95B2A10",
              "versionEndExcluding": "5.35.42",
              "versionStartIncluding": "5.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5536AD0D-EE19-41C7-BC57-69EAF77D6E8C",
              "versionEndExcluding": "5.42.51",
              "versionStartIncluding": "5.4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C140942E-1DC5-4491-8BB6-7FF6960A216D",
              "versionEndExcluding": "5.50.51",
              "versionStartIncluding": "5.5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "324ADC7E-AECD-4B7D-8571-5399542C2BF6",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "506DEE00-30D2-4E29-9645-757EB8778C0F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "480C5657-5C05-40F5-B76A-E67119727ED8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F3C3E60-7C36-4F5D-B454-97C9D0FD9459",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc127e_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AEB5AD1-3973-4150-BEA2-C9DE0B98222F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc127e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F63C0B17-60E2-4240-92FD-4B7C7D8F2C8B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc227g_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3F52F29-0ACF-4ECC-927A-0CB27399E5D9",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc227g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D1E85AC-1305-4C5E-AD8B-39B2654F6057",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc277g_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F203C449-2B5C-47A1-BF3D-8DCFD29F0B18",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc277g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "320F5752-86B3-4C08-89D0-02272753A6D0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc327g_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A37FB5EC-BB64-472C-81FC-8EEF238E3C12",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc327g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC7303D1-CC95-42C7-B843-C3B3B3336669",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc377g_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "45013BCA-3897-4D58-81FA-D8CB9D19268C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc377g:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDD6F034-BC50-4223-AE5D-319F04C866A8",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6422BF3-01B7-443B-BD2B-80E45D7C3F5F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A40D0CDB-7BE6-491F-B730-3B4E10CA159A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "696F47E6-C1CA-4A58-A91F-4B3EA92954AF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDF9D4C3-1892-48FA-95B4-835B636A4005",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F712060C-ECDB-4BC7-B9B9-468B41DE615B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D9AF082-8345-4BE1-B1FC-6E0316BB833B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D511C170-65E5-416D-B7CE-557A503F25AE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E430C4C5-D887-47C6-B50F-66EEE9519151",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "577C19F5-82ED-46DF-91CC-A074DE99EBDD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5F9FA42D-B2F0-456F-89B7-6A5789787FBA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CEF4592C-5DB3-45F4-B354-59701BBA0C08",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1157418C-14C4-43C4-B63E-7E98D868A94F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "87F0538B-ED6E-40C7-9C2A-4C5DC3D2935E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "187C6D51-5B86-484D-AE0F-26D1C9465580",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABE0A54C-AEB3-4B1D-AD5D-F9239709B052",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B89A6863-B602-4404-8D26-337FECABFFF0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM."
    },
    {
      "lang": "es",
      "value": "Se ha descubierto un problema en InsydeH2O con el Kernel versi\u00f3n 5.0 antes de 05.08.42, el Kernel 5.1 antes de 05.16.42, el Kernel versi\u00f3n 5.2 antes de 05.26.42, el Kernel versi\u00f3n 5.3 antes de 05.35.42, el Kernel versi\u00f3n 5.4 antes de 05.42.51 y el Kernel versi\u00f3n 5.5 antes de 05.50.51. Una vulnerabilidad de corrupci\u00f3n de memoria SMM en FvbServicesRuntimeDxe permite a un posible atacante escribir datos fijos o predecibles en la SMRAM. La explotaci\u00f3n de este problema podr\u00eda llevar a escalar privilegios a SMM."
    }
  ],
  "id": "CVE-2021-42554",
  "lastModified": "2026-06-17T04:09:49.127",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "CHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 6.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2022-02-03T02:15:07.380",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.insyde.com/security-pledge"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.insyde.com/security-pledge/SA-2022012"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory"
      ],
      "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.insyde.com/security-pledge"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.insyde.com/security-pledge/SA-2022012"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.kb.cert.org/vuls/id/796611"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-9HWG-WQ94-95PR

Vulnerability from github – Published: 2022-02-10 00:00 – Updated: 2026-08-11 15:30

Details

SMM memory corruption vulnerability allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

Severity

8.2 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2021-42554"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-787"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-02-03T02:15:00Z",
    "severity": "CRITICAL"
  },
  "details": "SMM memory corruption vulnerability allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
  "id": "GHSA-9hwg-wq94-95pr",
  "modified": "2026-08-11T15:30:35Z",
  "published": "2022-02-10T00:00:57Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42554"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/html/ssa-306654.html"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
    },
    {
      "type": "WEB",
      "url": "https://security.netapp.com/advisory/ntap-20220216-0007"
    },
    {
      "type": "WEB",
      "url": "https://www.insyde.com/security-pledge"
    },
    {
      "type": "WEB",
      "url": "https://www.insyde.com/security-pledge/SA-2022012"
    },
    {
      "type": "WEB",
      "url": "https://www.kb.cert.org/vuls/id/796611"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2021-42554

Vulnerability from gsd - Updated: 2023-12-13 01:23

Details

Aliases

CVE-2021-42554

Aliases

CVE-2021-42554

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2021-42554",
    "description": "SMM memory corruption vulnerability allowing a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
    "id": "GSD-2021-42554"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2021-42554"
      ],
      "details": "An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
      "id": "GSD-2021-42554",
      "modified": "2023-12-13T01:23:06.252288Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2021-42554",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.insyde.com/security-pledge",
            "refsource": "MISC",
            "url": "https://www.insyde.com/security-pledge"
          },
          {
            "name": "https://www.insyde.com/security-pledge/SA-2022012",
            "refsource": "MISC",
            "url": "https://www.insyde.com/security-pledge/SA-2022012"
          },
          {
            "name": "https://security.netapp.com/advisory/ntap-20220216-0007/",
            "refsource": "CONFIRM",
            "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
          },
          {
            "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf",
            "refsource": "CONFIRM",
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.08.42",
                "versionStartIncluding": "5.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.16.42",
                "versionStartIncluding": "5.1",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.26.42",
                "versionStartIncluding": "5.2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.35.42",
                "versionStartIncluding": "5.3",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.42.51",
                "versionStartIncluding": "5.4",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "5.50.51",
                "versionStartIncluding": "5.5",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc127e_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc127e:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc227g_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc227g:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc277g_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc277g:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc327g_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc327g:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc377g_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc377g:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-42554"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.insyde.com/security-pledge",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.insyde.com/security-pledge"
            },
            {
              "name": "https://www.insyde.com/security-pledge/SA-2022012",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.insyde.com/security-pledge/SA-2022012"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220216-0007/",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://security.netapp.com/advisory/ntap-20220216-0007/"
            },
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf",
              "refsource": "CONFIRM",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.5,
          "impactScore": 6.0
        }
      },
      "lastModifiedDate": "2022-03-08T20:18Z",
      "publishedDate": "2022-02-03T02:15Z"
    }
  }
}

SSA-306654

Vulnerability from csaf_siemens - Published: 2022-02-22 00:00 - Updated: 2026-08-11 00:00

Summary

SSA-306654: Insyde BIOS Vulnerabilities in Siemens Industrial Products

Notes

Summary: Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.

General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity

Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories

Terms of Use: The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.

CVE-2020-5953

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).

7.5 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-822 - Untrusted Pointer Dereference

Affected products

Known affected 17 products

Product	Version	Remediation
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2020-27339

In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-269 - Improper Privilege Management

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-33625

An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.

7.5 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-33626

In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the PnpSmm, SmmResourceCheckDxe, and BeepStatusCode drivers are 05.08.23, 05.16.23, 05.26.23, 05.35.23, 05.43.23, and 05.51.23 (for Kernel 5.0 through 5.5).

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-33627

An issue was discovered in Insyde InsydeH2O 5.x, affecting FwBlockServiceSmm. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-38489

An issue was discovered in the the HddPasswordPei driver of the Insyde InsydeH2O 5.x. HDD password is stored in plaintext.

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-256 - Plaintext Storage of a Password

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-41837

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-41838

An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of a Numeric Range Comparison Without a Minimum Check.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-41839

An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-41840

An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of Functionality from an Untrusted Control Sphere.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Known affected 17 products

Product	Version	Remediation
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-41841

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of Functionality from an Untrusted Control Sphere.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-829 - Inclusion of Functionality from Untrusted Control Sphere

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-42059

An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41, and Kernel 5.4 before 05.42.20. A stack-based buffer overflow leads toarbitrary code execution in UEFI DisplayTypeDxe DXE driver.

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-42060

An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before 05.32.22. An Int15ServiceSmm SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-42113

An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Kernel 5.3 before 05.32.25. An SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-42554

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-43323

An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 before 05.26.45, 5.1 before 05.16.45, and 5.0 before 05.08.45. An SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-43522

An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurityCommandDxe SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

7.5 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-43613

An issue was discovered in Insyde InsydeH2O 5.x, affecting SysPasswordDxe that exposes user and administrator password hashes in runtime UEFI variables, leading to escalation of privilege.

5.2 (Medium)


                        
                          CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 Siemens / SIMATIC Field PG M5	vers:all/*	Mitigation No Fix Planned
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E Siemens / SIMATIC IPC427E	vers:all/*	Mitigation None Available
SIMATIC IPC477E Siemens / SIMATIC IPC477E	vers:all/*	Mitigation None Available
SIMATIC IPC477E PRO Siemens / SIMATIC IPC477E PRO	vers:all/*	Mitigation None Available
SIMATIC IPC627E Siemens / SIMATIC IPC627E	vers:all/*	Mitigation None Available
SIMATIC IPC647E Siemens / SIMATIC IPC647E	vers:all/*	Mitigation None Available
SIMATIC IPC677E Siemens / SIMATIC IPC677E	vers:all/*	Mitigation None Available
SIMATIC IPC847E Siemens / SIMATIC IPC847E	vers:all/*	Mitigation None Available
SIMATIC ITP1000 Siemens / SIMATIC ITP1000	vers:all/*	Mitigation No Fix Planned
SIPLUS IPC427E Siemens / SIPLUS IPC427E	vers:all/*	Mitigation None Available

CVE-2021-43614

Error in handling the PlatformLangCodes UEFI variable in the VariableEditSmm driver could cause a buffer overflow, leading to resource exhaustion and failure.

6.7 (Medium)


                        
                          CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L

CWE-400 - Uncontrolled Resource Consumption

Affected products

Known affected 17 products

Product	Version	Remediation
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-43615

An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 before 05.43.22, and 5.5 before 05.51.22. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-45969

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location).

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-45970

An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the status code saved at the CommBuffer+4 location).

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2021-45971

An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (CommBufferData).

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2022-24030

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

8.4 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2022-24031

An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-787 - Out-of-bounds Write

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

CVE-2022-24069

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before 05.08.41, 5.1 before 05.16.29, 5.2 before 05.26.29, 5.3 before 05.35.29, 5.4 before 05.43.29, and 5.5 before 05.51.29. An SMM callout vulnerability allows an attacker to hijack the execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

8.2 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-20 - Improper Input Validation

Affected products

Known affected 18 products

Product	Version	Remediation
RUGGEDCOM APE1808 - BIOS < V1.0.202N Siemens / RUGGEDCOM APE1808 - BIOS	vers:intdot/<1.0.202N	Mitigation Vendor Fix fix
SIMATIC Field PG M5 < V22.01.10 Siemens / SIMATIC Field PG M5	vers:intdot/<22.01.10	Mitigation Vendor Fix fix
SIMATIC Field PG M6 < V26.01.13 Siemens / SIMATIC Field PG M6	vers:intdot/<26.01.13	Mitigation Vendor Fix fix
SIMATIC IPC127E < V27.01.09 Siemens / SIMATIC IPC127E	vers:intdot/<27.01.09	Mitigation Vendor Fix fix
SIMATIC IPC227G < V28.01.04 Siemens / SIMATIC IPC227G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G < V28.01.04 Siemens / SIMATIC IPC277G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC277G PRO < V28.01.04 Siemens / SIMATIC IPC277G PRO	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC327G < V28.01.04 Siemens / SIMATIC IPC327G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC377G < V28.01.04 Siemens / SIMATIC IPC377G	vers:intdot/<28.01.04	Mitigation Vendor Fix fix
SIMATIC IPC427E < V21.01.17 Siemens / SIMATIC IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E < V21.01.17 Siemens / SIMATIC IPC477E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC477E PRO < V21.01.17 Siemens / SIMATIC IPC477E PRO	vers:intdot/<21.01.17	Mitigation Vendor Fix fix
SIMATIC IPC627E < V25.02.12 Siemens / SIMATIC IPC627E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC647E < V25.02.12 Siemens / SIMATIC IPC647E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC677E < V25.02.12 Siemens / SIMATIC IPC677E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC IPC847E < V25.02.12 Siemens / SIMATIC IPC847E	vers:intdot/<25.02.12	Mitigation Vendor Fix fix
SIMATIC ITP1000 < V23.01.10 Siemens / SIMATIC ITP1000	vers:intdot/<23.01.10	Mitigation Vendor Fix fix
SIPLUS IPC427E < V21.01.17 Siemens / SIPLUS IPC427E	vers:intdot/<21.01.17	Mitigation Vendor Fix fix

References

2 references

URL	Category
https://cert-portal.siemens.com/productcert/html/…	self
https://cert-portal.siemens.com/productcert/csaf/…	self

JSON

To clipboard

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Insyde has published information on vulnerabilities in Insyde BIOS in February 2022. This advisory lists the Siemens Industrial products affected by these vulnerabilities.\n\nSiemens has released new versions for the affected products and recommends to update to the latest versions.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
        "title": "General Recommendations"
      },
      {
        "category": "general",
        "text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "productcert@siemens.com",
      "name": "Siemens ProductCERT",
      "namespace": "https://www.siemens.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "SSA-306654: Insyde BIOS Vulnerabilities in Siemens Industrial Products - HTML Version",
        "url": "https://cert-portal.siemens.com/productcert/html/ssa-306654.html"
      },
      {
        "category": "self",
        "summary": "SSA-306654: Insyde BIOS Vulnerabilities in Siemens Industrial Products - CSAF Version",
        "url": "https://cert-portal.siemens.com/productcert/csaf/ssa-306654.json"
      }
    ],
    "title": "SSA-306654: Insyde BIOS Vulnerabilities in Siemens Industrial Products",
    "tracking": {
      "current_release_date": "2026-08-11T00:00:00.000Z",
      "generator": {
        "engine": {
          "name": "Siemens ProductCERT CSAF Generator",
          "version": "1"
        }
      },
      "id": "SSA-306654",
      "initial_release_date": "2022-02-22T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-02-22T00:00:00.000Z",
          "legacy_version": "1.0",
          "number": "1",
          "summary": "Publication Date"
        },
        {
          "date": "2022-03-08T00:00:00.000Z",
          "legacy_version": "1.1",
          "number": "2",
          "summary": "Corrected AV:L for all CVEs, added RUGGEDCOM APE1808 and SIMATIC IPC477E PRO"
        },
        {
          "date": "2022-07-12T00:00:00.000Z",
          "legacy_version": "1.2",
          "number": "3",
          "summary": "Added CVE-2021-43613, CVE-2021-43614 and CVE-2021-38489, add fix for SIMATIC Field PG M6, SIMATIC ITP1000 for all CVEs except CVE-2021-43613"
        },
        {
          "date": "2022-08-09T00:00:00.000Z",
          "legacy_version": "1.3",
          "number": "4",
          "summary": "Added fix for SIMATIC IPC227G, SIMATIC IPC277G, SIMATIC IPC327G, SIMATIC IPC377G, clarified affected versions for RUGGEDCOM APE1808"
        },
        {
          "date": "2022-10-11T00:00:00.000Z",
          "legacy_version": "1.4",
          "number": "5",
          "summary": "Added partial fix for SIMATIC IPC427E, SIMATIC IPC477E, SIMATIC IPC477E Pro"
        },
        {
          "date": "2023-02-14T00:00:00.000Z",
          "legacy_version": "1.5",
          "number": "6",
          "summary": "Added partial fix for SIMATIC IPC627E, SIMATIC IPC677E, SIMATIC IPC677E, and SIMATIC IPC847E"
        },
        {
          "date": "2023-07-11T00:00:00.000Z",
          "legacy_version": "1.6",
          "number": "7",
          "summary": "Added fix SIMATIC Field PG M5"
        },
        {
          "date": "2023-08-08T00:00:00.000Z",
          "legacy_version": "1.7",
          "number": "8",
          "summary": "Removed fix for SIMATIC Field PG M6 as fix version was withdrawn"
        },
        {
          "date": "2023-11-14T00:00:00.000Z",
          "legacy_version": "1.8",
          "number": "9",
          "summary": "Added fix for SIMATIC IPC127E"
        },
        {
          "date": "2025-04-08T00:00:00.000Z",
          "legacy_version": "1.9",
          "number": "10",
          "summary": "Added fix for all CVE IDs for SIMATIC Field PG M6; Added fix for CVE-2021-43613 for SIMATIC IPC627E / IPC647E / IPC677E / IPC847E; Removed fix for CVE-2021-43613 for SIMATIC Field PG M5 as this CVE was not fixed in version V22.01.11; RUGGEDCOM APE1808 - BIOS: Removed CVE-2020-5953, CVE-2021-41840 and CVE-2021-43614 as not affected; added the link to the APE software upgrade tool to apply a BIOS version that fixes the other CVE IDs"
        },
        {
          "date": "2026-08-11T00:00:00.000Z",
          "legacy_version": "2.0",
          "number": "11",
          "summary": "Updated the remediation for CVE-2021-43613 for SIMATIC ITP1000 and M5 to \u0027No fix planned\u0027"
        }
      ],
      "status": "interim",
      "version": "11"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c1.0.202N",
                "product": {
                  "name": "RUGGEDCOM APE1808 - BIOS \u003c V1.0.202N",
                  "product_id": "1"
                }
              }
            ],
            "category": "product_name",
            "name": "RUGGEDCOM APE1808 - BIOS"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c22.01.10",
                "product": {
                  "name": "SIMATIC Field PG M5 \u003c V22.01.10",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC Field PG M5",
                  "product_id": "3"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Field PG M5"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c26.01.13",
                "product": {
                  "name": "SIMATIC Field PG M6 \u003c V26.01.13",
                  "product_id": "4"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC Field PG M6"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c27.01.09",
                "product": {
                  "name": "SIMATIC IPC127E \u003c V27.01.09",
                  "product_id": "5"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC127E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.04",
                "product": {
                  "name": "SIMATIC IPC227G \u003c V28.01.04",
                  "product_id": "6"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC227G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.04",
                "product": {
                  "name": "SIMATIC IPC277G \u003c V28.01.04",
                  "product_id": "7"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC277G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.04",
                "product": {
                  "name": "SIMATIC\u00a0IPC277G PRO \u003c V28.01.04",
                  "product_id": "8"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC\u00a0IPC277G PRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.04",
                "product": {
                  "name": "SIMATIC IPC327G \u003c V28.01.04",
                  "product_id": "9"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC327G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c28.01.04",
                "product": {
                  "name": "SIMATIC IPC377G \u003c V28.01.04",
                  "product_id": "10"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC377G"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21.01.17",
                "product": {
                  "name": "SIMATIC IPC427E \u003c V21.01.17",
                  "product_id": "11"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC427E",
                  "product_id": "12"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC427E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21.01.17",
                "product": {
                  "name": "SIMATIC IPC477E \u003c V21.01.17",
                  "product_id": "13"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC477E",
                  "product_id": "14"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC477E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21.01.17",
                "product": {
                  "name": "SIMATIC IPC477E PRO \u003c V21.01.17",
                  "product_id": "15"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC477E PRO",
                  "product_id": "16"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC477E PRO"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.12",
                "product": {
                  "name": "SIMATIC IPC627E \u003c V25.02.12",
                  "product_id": "17"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC627E",
                  "product_id": "18"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC627E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.12",
                "product": {
                  "name": "SIMATIC IPC647E \u003c V25.02.12",
                  "product_id": "19"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC647E",
                  "product_id": "20"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC647E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.12",
                "product": {
                  "name": "SIMATIC IPC677E \u003c V25.02.12",
                  "product_id": "21"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC677E",
                  "product_id": "22"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC677E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c25.02.12",
                "product": {
                  "name": "SIMATIC IPC847E \u003c V25.02.12",
                  "product_id": "23"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC IPC847E",
                  "product_id": "24"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC IPC847E"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c23.01.10",
                "product": {
                  "name": "SIMATIC ITP1000 \u003c V23.01.10",
                  "product_id": "25"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIMATIC ITP1000",
                  "product_id": "26"
                }
              }
            ],
            "category": "product_name",
            "name": "SIMATIC ITP1000"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:intdot/\u003c21.01.17",
                "product": {
                  "name": "SIPLUS IPC427E \u003c V21.01.17",
                  "product_id": "27"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SIPLUS IPC427E",
                  "product_id": "28"
                }
              }
            ],
            "category": "product_name",
            "name": "SIPLUS IPC427E"
          }
        ],
        "category": "vendor",
        "name": "Siemens"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-5953",
      "cwe": {
        "id": "CWE-822",
        "name": "Untrusted Pointer Dereference"
      },
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2020-5953"
    },
    {
      "cve": "CVE-2020-27339",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "description",
          "text": "In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2020-27339"
    },
    {
      "cve": "CVE-2021-33625",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-33625"
    },
    {
      "cve": "CVE-2021-33626",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "notes": [
        {
          "category": "description",
          "text": "In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the PnpSmm, SmmResourceCheckDxe, and BeepStatusCode drivers are 05.08.23, 05.16.23, 05.26.23, 05.35.23, 05.43.23, and 05.51.23 (for Kernel 5.0 through 5.5).",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-33626"
    },
    {
      "cve": "CVE-2021-33627",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in Insyde InsydeH2O 5.x, affecting FwBlockServiceSmm. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-33627"
    },
    {
      "cve": "CVE-2021-38489",
      "cwe": {
        "id": "CWE-256",
        "name": "Plaintext Storage of a Password"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in the the HddPasswordPei driver of the Insyde InsydeH2O 5.x. HDD password is stored in plaintext.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-38489"
    },
    {
      "cve": "CVE-2021-41837",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-41837"
    },
    {
      "cve": "CVE-2021-41838",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of a Numeric Range Comparison Without a Minimum Check.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-41838"
    },
    {
      "cve": "CVE-2021-41839",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-41839"
    },
    {
      "cve": "CVE-2021-41840",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of Functionality from an Untrusted Control Sphere.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-41840"
    },
    {
      "cve": "CVE-2021-41841",
      "cwe": {
        "id": "CWE-829",
        "name": "Inclusion of Functionality from Untrusted Control Sphere"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of Functionality from an Untrusted Control Sphere.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-41841"
    },
    {
      "cve": "CVE-2021-42059",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41, and Kernel 5.4 before 05.42.20. A stack-based buffer overflow leads toarbitrary code execution in UEFI DisplayTypeDxe DXE driver.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-42059"
    },
    {
      "cve": "CVE-2021-42060",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before 05.32.22. An Int15ServiceSmm SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-42060"
    },
    {
      "cve": "CVE-2021-42113",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Kernel 5.3 before 05.32.25. An SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-42113"
    },
    {
      "cve": "CVE-2021-42554",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-42554"
    },
    {
      "cve": "CVE-2021-43323",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in UsbCoreDxe in Insyde InsydeH2O with kernel 5.5 before 05.51.45, 5.4 before 05.43.45, 5.3 before 05.35.45, 5.2 before 05.26.45, 5.1 before 05.16.45, and 5.0 before 05.08.45. An SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-43323"
    },
    {
      "cve": "CVE-2021-43522",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurityCommandDxe SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-43522"
    },
    {
      "cve": "CVE-2021-43613",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in Insyde InsydeH2O 5.x, affecting SysPasswordDxe that exposes user and administrator password hashes in runtime UEFI variables, leading to escalation of privilege.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "3",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "12",
          "14",
          "16",
          "18",
          "20",
          "22",
          "24",
          "26",
          "28"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "12",
            "14",
            "16",
            "18",
            "20",
            "22",
            "24",
            "26",
            "28"
          ]
        },
        {
          "category": "no_fix_planned",
          "details": "Currently no fix is planned",
          "product_ids": [
            "3",
            "26"
          ]
        },
        {
          "category": "none_available",
          "details": "Currently no fix is available",
          "product_ids": [
            "12",
            "14",
            "16",
            "18",
            "20",
            "22",
            "24",
            "28"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "1",
            "3",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "12",
            "14",
            "16",
            "18",
            "20",
            "22",
            "24",
            "26",
            "28"
          ]
        }
      ],
      "title": "CVE-2021-43613"
    },
    {
      "cve": "CVE-2021-43614",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "description",
          "text": "Error in handling the PlatformLangCodes UEFI variable in the VariableEditSmm driver could cause a buffer overflow, leading to resource exhaustion and failure.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-43614"
    },
    {
      "cve": "CVE-2021-43615",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in HddPassword in Insyde InsydeH2O with kernel 5.1 before 05.16.23, 5.2 before 05.26.23, 5.3 before 05.35.23, 5.4 before 05.43.22, and 5.5 before 05.51.22. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-43615"
    },
    {
      "cve": "CVE-2021-45969",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location).",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-45969"
    },
    {
      "cve": "CVE-2021-45970",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the status code saved at the CommBuffer+4 location).",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-45970"
    },
    {
      "cve": "CVE-2021-45971",
      "cwe": {
        "id": "CWE-120",
        "name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (CommBufferData).",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2021-45971"
    },
    {
      "cve": "CVE-2022-24030",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2022-24030"
    },
    {
      "cve": "CVE-2022-24031",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2022-24031"
    },
    {
      "cve": "CVE-2022-24069",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.0 before 05.08.41, 5.1 before 05.16.29, 5.2 before 05.26.29, 5.3 before 05.35.29, 5.4 before 05.43.29, and 5.5 before 05.51.29. An SMM callout vulnerability allows an attacker to hijack the execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "1",
          "2",
          "4",
          "5",
          "6",
          "7",
          "8",
          "9",
          "10",
          "11",
          "13",
          "15",
          "17",
          "19",
          "21",
          "23",
          "25",
          "27"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As a prerequisite for an attack, an attacker must be able to run\nuntrusted code on affected systems. Siemens recommends limiting the possibilities to run untrusted code",
          "product_ids": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to V1.0.202N or later version",
          "product_ids": [
            "1"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109814796/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V21.01.17 or later version",
          "product_ids": [
            "11",
            "13",
            "15",
            "27"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V22.01.10 or later version",
          "product_ids": [
            "2"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V23.01.10 or later version",
          "product_ids": [
            "25"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V25.02.12 or later version",
          "product_ids": [
            "17",
            "19",
            "21",
            "23"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V26.01.13 or later version",
          "product_ids": [
            "4"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V27.01.09 or later version",
          "product_ids": [
            "5"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        },
        {
          "category": "vendor_fix",
          "details": "Update to V28.01.04 or later version",
          "product_ids": [
            "6",
            "7",
            "8",
            "9",
            "10"
          ],
          "url": "https://support.industry.siemens.com/cs/ww/en/view/109763408/"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "1",
            "2",
            "4",
            "5",
            "6",
            "7",
            "8",
            "9",
            "10",
            "11",
            "13",
            "15",
            "17",
            "19",
            "21",
            "23",
            "25",
            "27"
          ]
        }
      ],
      "title": "CVE-2022-24069"
    }
  ]
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2021-42554 (GCVE-0-2021-42554)

Solution

Solution

Solution

Solution

Tags

Sightings

Nomenclature