Skip to content
OpenAdvisories
High · 8.2 CVE-2025-4423 EUVD-2025-23141GHSA-84fx-mhqp-q4r7

SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead to memory corruption

Published Jul 30, 2025 · Updated Aug 14, 2025 · Assigned by Insyde

Vendor: Insyde Software Product: InsydeH2O

Description

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home

Affected products

VendorProductAffectedFixed
Insyde Software InsydeH2O Feature developed for Lenovo – < L05.05.40.011803.172079 L05.05.40.011803.172079

Advisories 1

References