Approved changes feed: RSS · Atom

cpe:2.3:a:insyde:insydeh2o:5.6:*:*:*:*:*:*:*

part: a version: 5.6 update: *

VendorInsyde (9c0ef15d-4d71-5574-a128-355141b768e0)
ProductInsydeh2O (f5651e23-4034-5e37-b2df-c804ff3aa00c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-27353 vulnerable 2026-06-03 14:55:17.434479 Details available
A memory corruption vulnerability in SdHost and SdMmcDevice in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.
Published: 2024-05-15T14:18:19.870Z
Updated: 2025-02-13T15:47:20.736Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25079 vulnerable 2026-06-03 14:55:06.359676 Details available
A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.
Published: 2024-05-15T14:23:26.249Z
Updated: 2025-02-13T15:47:10.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25078 vulnerable 2026-06-03 14:55:06.358290 Details available
A memory corruption vulnerability in StorageSecurityCommandDxe in Insyde InsydeH2O before kernel 5.2: IB19130163 in 05.29.07, kernel 5.3: IB19130163 in 05.38.07, kernel 5.4: IB19130163 in 05.46.07, kernel 5.5: IB19130163 in 05.54.07, and kernel 5.6: IB19130163 in 05.61.07 could lead to escalating privileges in SMM.
Published: 2024-05-15T14:11:01.648Z
Updated: 2025-02-13T15:47:09.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39283 vulnerable 2026-06-03 14:52:38.522024 Details available
An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation.
Published: 2023-11-02T00:00:00.000Z
Updated: 2024-09-05T15:24:35.544Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.