Description
An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure.
Advisories 3
- WID-SEC-2023-2021 Insyde UEFI Firmware: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 3, 2023
- ICSA-23-257-04 Siemens RUGGEDCOM APE1808 Products CISA ICS & IT advisories · Sep 12, 2023
- SSA-957369 SSA-957369: Insyde BIOS Vulnerabilities in RUGGEDCOM APE1808 Product Family Siemens ProductCERT · Sep 12, 2023