Description
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM.
Advisories 2
- ICSA-23-257-04 Siemens RUGGEDCOM APE1808 Products CISA ICS & IT advisories · Sep 12, 2023
- SSA-957369 SSA-957369: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family Siemens ProductCERT · Sep 12, 2023