Skip to content
OpenAdvisories
Medium WID-SEC-2023-0937 6 CVEs

Lenovo BIOS: Mehrere Schwachstellen

Published Apr 11, 2023 · Updated Apr 11, 2023 · de-DE

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Lenovo BIOS ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial of Service Zustand herbeizuführen.

Product

Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.

Vulnerabilities 6

  • High 8.8

    An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an …

  • High 8.8

    An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an atta…

  • High 8.8

    An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input v…

  • High 8.4

    An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may co…

  • High 7.8

    An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before …

  • Medium 5.5

    An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI function 0x17 verifies that …

Revision history

  1. #1

    Initiale Fassung

References