IM
IronMonkey Threat Research

CVE-2021-42060 HIGH

Published: 2022-02-03 | Last Modified: 2026-08-11 | Status: Modified

Description

An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before 05.32.22. An Int15ServiceSmm SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this issue could lead to escalating privileges to SMM.

Additional Descriptions (1)

Se ha descubierto un problema en el Kernel InsydeH2O 5.0 hasta la versión 05.08.41, en el Kernel 5.1 hasta la versión 05.16.41, en el Kernel 5.2 hasta la versión 05.23.22 y en el Kernel 5.3 hasta la versión 05.32.22. Una vulnerabilidad de la llamada Int15ServiceSmm SMM permite a un atacante secuestrar el flujo de ejecución del código que se ejecuta en el modo de gestión del sistema. La explotación de este problema podría conducir a la escalada de privilegios al SMM

CVSS Metrics

Base Score: 8.2 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredHIGH
User InteractionNONE
ScopeCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.5

Impact Score: 6.0

Base Score: 7.2 (HIGH)

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access VectorLOCAL
Access ComplexityLOW
AuthenticationNONE
Confidentiality ImpactCOMPLETE
Integrity ImpactCOMPLETE
Availability ImpactCOMPLETE

Source: [email protected]

Type: Primary

Exploitability Score: 3.9

Impact Score: 10.0

Weaknesses

Source Type Description
[email protected] Primary
en NVD-CWE-noinfo

Affected Products

Vendor Product Version Update Type
insyde insydeh2o * <built-in method update of dict object at 0x72f059971480> Application
insyde insydeh2o * <built-in method update of dict object at 0x72efbd108080> Application
insyde insydeh2o * <built-in method update of dict object at 0x72f0599738c0> Application
insyde insydeh2o * <built-in method update of dict object at 0x72efbd10b780> Application

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*

Operator: OR

Vulnerable CPE
Yes cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*

References

Notification
Message here