CVE-2021-41841 HIGH

Published: 2022-02-03 | Last Modified: 2026-08-11 | Status: Modified

Description

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of Inclusion of Functionality from an Untrusted Control Sphere.

Additional Descriptions (1)

Se ha descubierto un problema en AhciBusDxe en el kernel versión 5.0 hasta la 5.5 de InsydeH2O. Hay una llamada SMM que permite a un atacante acceder al Modo de Gestión del Sistema y ejecutar código arbitrario. Esto ocurre debido a la inclusión de funcionalidad desde una esfera de control no confiable

CVSS Metrics

Base Score: 8.2 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector	LOCAL
Attack Complexity	LOW
Privileges Required	HIGH
User Interaction	NONE
Scope	CHANGED
Confidentiality Impact	HIGH
Integrity Impact	HIGH
Availability Impact	HIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.5

Impact Score: 6.0

Base Score: 7.2 (HIGH)

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector	LOCAL
Access Complexity	LOW
Authentication	NONE
Confidentiality Impact	COMPLETE
Integrity Impact	COMPLETE
Availability Impact	COMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 10.0

Weaknesses

Source	Type	Description
[email protected]	Primary	en CWE-829

Affected Products

Vendor	Product	Version	Update	Type
insyde	insydeh2o	*	<built-in method update of dict object at 0x72effec6ed80>	Application
insyde	insydeh2o	*	<built-in method update of dict object at 0x72f059356e80>	Application
insyde	insydeh2o	*	<built-in method update of dict object at 0x72f059354340>	Application
insyde	insydeh2o	*	<built-in method update of dict object at 0x72f05a450040>	Application
insyde	insydeh2o	*	<built-in method update of dict object at 0x72effec6f080>	Application
insyde	insydeh2o	*	<built-in method update of dict object at 0x72f0582b4f40>	Application

Affected Configurations

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:insyde:insydeh2o::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:insyde:insydeh2o::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:insyde:insydeh2o::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:insyde:insydeh2o::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:insyde:insydeh2o::::::::`

Operator: OR

Vulnerable	CPE
Yes	`cpe:2.3:a:insyde:insydeh2o::::::::`

References

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
Source: [email protected]

Third Party Advisory
https://security.netapp.com/advisory/ntap-20220217-0012/
Source: [email protected]

Third Party Advisory
https://www.insyde.com/security-pledge
Source: [email protected]

Vendor Advisory
https://www.insyde.com/security-pledge/SA-2022019
Source: [email protected]

Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://security.netapp.com/advisory/ntap-20220217-0012/
Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory
https://www.insyde.com/security-pledge
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://www.insyde.com/security-pledge/SA-2022019
Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory
https://www.kb.cert.org/vuls/id/796611
Source: af854a3a-2127-422b-91ae-364da2661108
https://cert-portal.siemens.com/productcert/html/ssa-306654.html
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e