CVE-2021-33625

EPSS 0.32%
Veröffentlicht 03.02.2022 02:15:06
Zuletzt bearbeitet 11.08.2026 13:17:19
Erkennungen
Login

An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 9

NVD 21 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Insyde ≫ Insydeh2o Version >= 5.1 < 5.16.23

Insyde ≫ Insydeh2o Version >= 5.2 < 5.26.23

Insyde ≫ Insydeh2o Version >= 5.3 < 5.35.23

Insyde ≫ Insydeh2o Version >= 5.4 < 5.43.22

Insyde ≫ Insydeh2o Version >= 5.5 < 5.51.22

Siemens ≫ Ruggedcom Ape1808 Firmware Version -

Siemens ≫ Ruggedcom Ape1808 Version -

Siemens ≫ Simatic Field Pg M5 Firmware Version -

Siemens ≫ Simatic Field Pg M5 Version -

Siemens ≫ Simatic Ipc127e Firmware Version -

Siemens ≫ Simatic Ipc127e Version -

Siemens ≫ Simatic Itp1000 Firmware Version -

Siemens ≫ Simatic Itp1000 Version -

Siemens ≫ Simatic Ipc277g Firmware Version -

Siemens ≫ Simatic Ipc277g Version -

Siemens ≫ Simatic Ipc227g Firmware Version -

Siemens ≫ Simatic Ipc227g Version -

Siemens ≫ Simatic Ipc327g Firmware Version -

Siemens ≫ Simatic Ipc327g Version -

Siemens ≫ Simatic Ipc377g Firmware Version -

Siemens ≫ Simatic Ipc377g Version -

Siemens ≫ Simatic Ipc427e Firmware Version -

Siemens ≫ Simatic Ipc427e Version -

Siemens ≫ Simatic Ipc477e Firmware Version -

Siemens ≫ Simatic Ipc477e Version -

Siemens ≫ Simatic Ipc477e Pro Firmware Version -

Siemens ≫ Simatic Ipc477e Pro Version -

Siemens ≫ Simatic Ipc627e Firmware Version -

Siemens ≫ Simatic Ipc627e Version -

Siemens ≫ Simatic Ipc647e Firmware Version -

Siemens ≫ Simatic Ipc647e Version -

Siemens ≫ Simatic Ipc677e Firmware Version -

Siemens ≫ Simatic Ipc677e Version -

Siemens ≫ Simatic Ipc847e Firmware Version -

Siemens ≫ Simatic Ipc847e Version -

Siemens ≫ Simatic Field Pg M6 Firmware Version -

Siemens ≫ Simatic Field Pg M6 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.32%	0.241

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	0.8	6	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
NIST	6.9	3.4	10	AV:L/AC:M/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf

Third Party Advisory

https://www.insyde.com/security-pledge

Vendor Advisory

https://security.netapp.com/advisory/ntap-20220222-0004/

Third Party Advisory

https://www.kb.cert.org/vuls/id/796611

https://cert-portal.siemens.com/productcert/html/ssa-306654.html

https://www.insyde.com/security-pledge/SA-2022014

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-33625

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-33625

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-33625

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2021-33625