CVE-2021-33627

Published: Feb 3, 2022Modified: Jun 17, 2026

8.2

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: NVD

Description

An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11, and 5.5 before 05.52.11 affecting FwBlockServiceSmm. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.

Affected (18)

Products: Insyde: Insydeh2o · Siemens: Simatic Field Pg M5 Firmware, Simatic Field Pg M6 Firmware, Simatic Ipc127e Firmware, Simatic Ipc227g Firmware, Simatic Ipc277g Firmware, Simatic Ipc327g Firmware, Simatic Ipc377g Firmware, Simatic Ipc427e Firmware, Simatic Ipc477e Firmware, Simatic Ipc627e Firmware, Simatic Ipc647e Firmware, Simatic Ipc677e Firmware, Simatic Ipc847e Firmware, Simatic Itp1000 Firmware

Insyde

1 product

Insydeh2o

Siemens

14 products

Simatic Field Pg M5 Firmware

Simatic Field Pg M6 Firmware

Simatic Ipc127e Firmware

Simatic Ipc227g Firmware

Simatic Ipc277g Firmware

Simatic Ipc327g Firmware

Simatic Ipc377g Firmware

Simatic Ipc427e Firmware

Simatic Ipc477e Firmware

Simatic Ipc627e Firmware

Simatic Ipc647e Firmware

Simatic Ipc677e Firmware

Simatic Ipc847e Firmware

Simatic Itp1000 Firmware

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Insyde Insydeh2o	From 5.0 to 5.08.29

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Insyde Insydeh2o	From 5.1 to 5.16.29

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Insyde Insydeh2o	From 5.2 to 5.26.29

Configuration D

1 vulnerable

Vulnerable Software	Affected Versions
Insyde Insydeh2o	From 5.3 to 5.35.29

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Field Pg M5 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Field Pg M5	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Field Pg M6 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Field Pg M6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc127e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc127e	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc227g Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc227g	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc277g Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc277g	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc327g Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc327g	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc377g Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc377g	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc427e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc427e	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc477e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc477e	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc627e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc627e	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc647e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc647e	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc677e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc677e	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Ipc847e Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Ipc847e	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Siemens Simatic Itp1000 Firmware	All versions

Running on/with	Platform Versions
Siemens Simatic Itp1000	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (9)

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf

Source: cve@mitre.org

Third Party Advisory

https://security.netapp.com/advisory/ntap-20220222-0002/

Source: cve@mitre.org

Third Party Advisory

https://www.insyde.com/security-pledge

Source: cve@mitre.org

Vendor Advisory

https://www.insyde.com/security-pledge/SA-2022022

Source: cve@mitre.org

Vendor Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf