Description
An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Insyde Software | InsydeH2O | See in the Solution | — |
Advisories 1
- SSA-306654 SSA-306654: Insyde BIOS Vulnerabilities in Siemens Industrial Products Siemens ProductCERT · Aug 11, 2026