CVE-2020-5955

Published: Nov 3, 2021Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileges.

Affected (17)

Products: Insyde: Insydeh2o Uefi Bios

Insyde

1 product

Insydeh2o Uefi Bios

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.32.30.0001

Running on/with	Platform Versions
Intel Ice Lake	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.41.35.0001

Running on/with	Platform Versions
Intel Tiger Lake	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.42.11.0026

Running on/with	Platform Versions
Intel Whitley Sp	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.04.21.0068

Running on/with	Platform Versions
Intel Grantley Ep	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.42.09.0003

Running on/with	Platform Versions
Intel Elkhart Lake	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.21.51.0040

Running on/with	Platform Versions
Intel Purley Ep Refresh Neon City	All versions

Configuration G

1 platform

Running on/with	Platform Versions
Intel Comet Lake Rvp	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.34.09.0030

Running on/with	Platform Versions
Intel Comet Lake Rvp	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.32.47.0001

Running on/with	Platform Versions
Intel Comet Lake	All versions

Configuration J

1 platform

Running on/with	Platform Versions
Intel Whiskey Lake Rvp	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.23.45.0023

Running on/with	Platform Versions
Intel Whiskey Lake Rvp	All versions

Configuration L

1 platform

Running on/with	Platform Versions
Intel Whiskey Lake	All versions

Configuration M

1 platform

Running on/with	Platform Versions
Intel Mehlow	All versions

Configuration N

1 platform

Running on/with	Platform Versions
Intel Mehlow R	All versions

Configuration O

1 platform

Running on/with	Platform Versions
Intel Mehlow R	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.23.04.0045

Running on/with	Platform Versions
Intel Mehlow	All versions

Configuration Q

1 platform

Running on/with	Platform Versions
Intel Coffee Lake	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.21.43.0001

Running on/with	Platform Versions
Intel Cannon Lake	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.11.26.0015

Running on/with	Platform Versions
Intel Kaby Lake Mrd	All versions

Configuration T

1 platform

Running on/with	Platform Versions
Intel Greenlow	All versions

Configuration U

1 platform

Running on/with	Platform Versions
Intel Greenlow R	All versions

Configuration V

1 platform

Running on/with	Platform Versions
Intel Greenlow	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.12.09.0075

Running on/with	Platform Versions
Intel Greenlow R	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.10.48.0001

Running on/with	Platform Versions
Intel Kaby Lake	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.05.39.0001

Running on/with	Platform Versions
Intel Skylake Mrd	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.04.15.0001

Running on/with	Platform Versions
Intel Skylake	All versions

Configuration A

1 platform

Running on/with	Platform Versions
Intel Coffee Lake	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Insyde Insydeh2o Uefi Bios	Before 05.23.27.0001

Running on/with	Platform Versions
Intel Whiskey Lake	All versions

References (6)

https://security.netapp.com/advisory/ntap-20220223-0003/

Source: cve@mitre.org

Third Party Advisory

https://www.insyde.com/products

Source: cve@mitre.org

ProductVendor Advisory

https://www.insyde.com/security-pledge/SA-2021002

Source: cve@mitre.org

Vendor Advisory

https://security.netapp.com/advisory/ntap-20220223-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.insyde.com/products

Source: af854a3a-2127-422b-91ae-364da2661108

ProductVendor Advisory

https://www.insyde.com/security-pledge/SA-2021002

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.