9.8

CVE-2020-5955

An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Insyde ≫ Insydeh2o Uefi Bios Version < 05.32.30.0001
   Intel ≫ Ice Lake Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.41.35.0001
   Intel ≫ Tiger Lake Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.42.11.0026
   Intel ≫ Whitley-sp Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.04.21.0068
   Intel ≫ Grantley-ep Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.42.09.0003
   Intel ≫ Elkhart Lake Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.21.51.0040
   Intel ≫ Purley-ep Refresh Neon City Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.34.09.0030
   Intel ≫ Comet Lake Rvp Version - SwEdition embedded
Insyde ≫ Insydeh2o Uefi Bios Version < 05.34.09.0030
   Intel ≫ Comet Lake Rvp Version - SwEdition server
Insyde ≫ Insydeh2o Uefi Bios Version < 05.32.47.0001
   Intel ≫ Comet Lake Version - SwEdition client
Insyde ≫ Insydeh2o Uefi Bios Version < 05.23.45.0023
   Intel ≫ Whiskey Lake Rvp Version - SwEdition embedded
Insyde ≫ Insydeh2o Uefi Bios Version < 05.23.45.0023
   Intel ≫ Whiskey Lake Rvp Version - SwEdition server
Insyde ≫ Insydeh2o Uefi Bios Version < 05.21.43.0001
   Intel ≫ Whiskey Lake Version - SwEdition client
Insyde ≫ Insydeh2o Uefi Bios Version < 05.23.04.0045
   Intel ≫ Mehlow Version - SwEdition embedded
Insyde ≫ Insydeh2o Uefi Bios Version < 05.23.04.0045
   Intel ≫ Mehlow-r Version - SwEdition embedded
Insyde ≫ Insydeh2o Uefi Bios Version < 05.23.04.0045
   Intel ≫ Mehlow-r Version - SwEdition server
Insyde ≫ Insydeh2o Uefi Bios Version < 05.23.04.0045
   Intel ≫ Mehlow Version - SwEdition server
Insyde ≫ Insydeh2o Uefi Bios Version < 05.21.43.0001
   Intel ≫ Coffee Lake Version - SwEdition client
Insyde ≫ Insydeh2o Uefi Bios Version < 05.21.43.0001
   Intel ≫ Cannon Lake Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.11.26.0015
   Intel ≫ Kaby Lake Mrd Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.12.09.0075
   Intel ≫ Greenlow Version - SwEdition embedded
Insyde ≫ Insydeh2o Uefi Bios Version < 05.12.09.0075
   Intel ≫ Greenlow-r Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.12.09.0075
   Intel ≫ Greenlow Version - SwEdition server
Insyde ≫ Insydeh2o Uefi Bios Version < 05.12.09.0075
   Intel ≫ Greenlow-r Version - SwEdition embedded
Insyde ≫ Insydeh2o Uefi Bios Version < 05.10.48.0001
   Intel ≫ Kaby Lake Version - SwEdition client
Insyde ≫ Insydeh2o Uefi Bios Version < 05.05.39.0001
   Intel ≫ Skylake Mrd Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.04.15.0001
   Intel ≫ Skylake Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.23.27.0001
   Intel ≫ Coffee Lake Version -
Insyde ≫ Insydeh2o Uefi Bios Version < 05.23.27.0001
   Intel ≫ Whiskey Lake Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.37% 0.683
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://security.netapp.com/advisory/ntap-20220223-0003/
Third Party Advisory
https://www.insyde.com/products
Vendor Advisory
Product
https://www.insyde.com/security-pledge/SA-2021002
Vendor Advisory