Skip to content
OpenAdvisories
High SSA-957369 23 CVEs

SSA-957369: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family

Published Sep 12, 2023 · Updated Sep 12, 2023

Vendor: Siemens Product: RUGGEDCOM APE1808 ADM (6GK6015-0AL20-0GL0) Product: RUGGEDCOM APE1808 ADM CC (6GK6015-0AL20-0GL1) Product: RUGGEDCOM APE1808 CKP (6GK6015-0AL20-0GK0) Product: RUGGEDCOM APE1808 CKP CC (6GK6015-0AL20-0GK1) Product: RUGGEDCOM APE1808 CLOUDCONNECT (6GK6015-0AL20-0GM0) Product: RUGGEDCOM APE1808 CLOUDCONNECT CC (6GK6015-0AL20-0GM1) Product: RUGGEDCOM APE1808 ELAN (6GK6015-0AL20-0GP0) Product: RUGGEDCOM APE1808 ELAN CC (6GK6015-0AL20-0GP1) Product: RUGGEDCOM APE1808 SAM-L (6GK6015-0AL20-0GN0) Product: RUGGEDCOM APE1808 SAM-L CC (6GK6015-0AL20-0GN1) Product: RUGGEDCOM APE1808CLA-P (6GK6015-0AL20-1AA0) Product: RUGGEDCOM APE1808CLA-P CC (6GK6015-0AL20-1AA1) Product: RUGGEDCOM APE1808CLA-S1 (6GK6015-0AL20-1AB0) Product: RUGGEDCOM APE1808CLA-S1 CC (6GK6015-0AL20-1AB1) Product: RUGGEDCOM APE1808CLA-S3 (6GK6015-0AL20-1AD0) Product: RUGGEDCOM APE1808CLA-S3 CC (6GK6015-0AL20-1AD1) Product: RUGGEDCOM APE1808CLA-S5 (6GK6015-0AL20-1AF0) Product: RUGGEDCOM APE1808CLA-S5 CC (6GK6015-0AL20-1AF1) Product: RUGGEDCOM APE1808LNX (6GK6015-0AL20-0GH0) Product: RUGGEDCOM APE1808LNX CC (6GK6015-0AL20-0GH1) Product: RUGGEDCOM APE1808W10 (6GK6015-0AL20-0GJ0) Product: RUGGEDCOM APE1808W10 CC (6GK6015-0AL20-0GJ1)

Summary

Insyde has published information on vulnerabilities in Insyde BIOS up to
August 2023. These vulnerabilities also affect the RUGGEDCOM APE1808 product family.
Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 23

  • High 8.2
    CVE-2022-29275

    In UsbCoreDxe, untrusted input may allow SMRAM or OS memory tampering Use of untrusted pointers could allow OS or SMRAM…

  • High 8.2
    CVE-2022-30772

    Manipulation of the input address in PnpSmm function 0x52 could be used by malware to overwrite SMRAM or OS kernel memo…

  • High 8.2
    CVE-2022-35893

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the …

  • High 8.2
    CVE-2022-35895

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly…

  • High 8.2
    CVE-2022-36338

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver…

  • High 7.5
    CVE-2022-30283

    In UsbCoreDxe, tampering with the contents of the USB working buffer using DMA while certain USB transactions are in pr…

  • High 7.4
    CVE-2021-38578

    Existing CommBuffer checks in SmmEntryPoint will not catch underflow when computing BufferSize.

    TianoCore EDK II edk2 edk2 Debian Ubuntu
  • High 7.0
    CVE-2022-32469

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the PnpSmm shared buffer used b…

  • High 7.0
    CVE-2022-32470

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FwBlockServiceSmm shared bu…

  • High 7.0
    CVE-2022-32471

    An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe driver uses the comma…

  • High 7.0
    CVE-2022-32475

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared b…

  • High 7.0
    CVE-2022-32477

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FvbServicesRuntimeDxe share…

  • High 7.0
    CVE-2022-32953

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the SdHostDriver buffer used by…

  • High 7.0
    CVE-2022-32954

    An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the SdMmcDevice buffer used by …

  • Medium 6.7
    CVE-2023-24932 Public exploit EPSS 12%

    Secure Boot Security Feature Bypass Vulnerability

    Secure Boot Security Feature Bypass Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  • Medium 6.0
    CVE-2022-35894

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driv…

  • Medium 6.0
    CVE-2022-35896

    An issue SMM memory leak vulnerability in SMM driver (SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through …

  • Medium 5.6
    CVE-2017-5715 Public exploit EPSS 73%

    Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

    Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine
  • Medium 5.5
    CVE-2022-24350

    An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that …

  • Medium 5.5
    CVE-2023-27373

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attac…

  • Unscored —
    CVE-2022-24351

    TOCTOU race-condition vulnerability in Insyde InsydeH2O with Kernel 5.2 before version 05.27.29, Kernel 5.3 before vers…

  • Unscored —
    CVE-2022-27405

    FreeType commit 53dfdcd8198d2b3201a23c4bad9190519ba918db was discovered to contain a segmentation violation via the fun…

    qt5-qtwebengine freetype freetype freetype Debian Ubuntu Azure Linux Alpine
  • Unscored —
    CVE-2023-31041

    An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information …

Revision history

  1. #1

    Publication Date

References