Approved changes feed: RSS · Atom

cpe:2.3:a:insyde:insydeh20:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorInsyde (9c0ef15d-4d71-5574-a128-355141b768e0)
ProductInsydeh20 (de49fac6-eb6c-5c6b-baa2-b88754e62144)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39283 vulnerable 2026-06-03 14:52:38.519673 Details available
An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation.
Published: 2023-11-02T00:00:00.000Z
Updated: 2024-09-05T15:24:35.544Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39281 vulnerable 2026-06-03 14:52:38.359662 Details available
A stack buffer overflow vulnerability discovered in AsfSecureBootDxe in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to run arbitrary code execution during the DXE phase.
Published: 2023-11-01T00:00:00.000Z
Updated: 2024-09-06T19:14:08.598Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.