CVE-2023-28468 in InsydeH2Oالمعلومات

الملخص

بحسب MITRE • 03/08/2023

An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntimeDxe SMM module exposes an SMI handler that allows an attacker to interact with the SPI flash at run-time from the OS.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

حجز

15/03/2023

إفشاء

03/08/2023

الاعتدال

تمت الموافقة

إدخال

VDB-236071

EPSS

0.00154

KEV

لا

النشاطات

منخفض جدًا

المصادر

Do you need the next level of professionalism?

Upgrade your account now!