CVE-2020-5955: Critical severity insydeh2o uefi bios vulnerability
Published Nov 3, 2021
·Updated
An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileges.
Affected Software
45 affected components
Insyde Insydeh2o Uefi Bios<05.32.30.0001
Intel Ice Lake
Insyde Insydeh2o Uefi Bios<05.41.35.0001
Intel Tiger Lake
Insyde Insydeh2o Uefi Bios<05.42.11.0026
Intel Whitley-sp
Insyde Insydeh2o Uefi Bios<05.04.21.0068
Intel Grantley-ep
Insyde Insydeh2o Uefi Bios<05.42.09.0003
Intel Elkhart Lake
Insyde Insydeh2o Uefi Bios<05.21.51.0040
Intel Purley-ep Refresh Neon City
Insyde Insydeh2o Uefi Bios<05.34.09.0030
Intel Comet Lake Rvp
Intel Comet Lake Rvp
Insyde Insydeh2o Uefi Bios<05.32.47.0001
Intel Comet Lake
Insyde Insydeh2o Uefi Bios<05.23.45.0023
Intel Whiskey Lake Rvp
Intel Whiskey Lake Rvp
Insyde Insydeh2o Uefi Bios<05.21.43.0001
Intel Whiskey Lake
Insyde Insydeh2o Uefi Bios<05.23.04.0045
Intel Mehlow
Intel Mehlow-R
Intel Mehlow-R
Intel Mehlow
Intel Coffee Lake
Intel Cannon Lake
Insyde Insydeh2o Uefi Bios<05.11.26.0015
Intel Kaby Lake Mrd
Insyde Insydeh2o Uefi Bios<05.12.09.0075
Intel Greenlow
Intel Greenlow-R
Intel Greenlow
Intel Greenlow-R
Insyde Insydeh2o Uefi Bios<05.10.48.0001
Intel Kaby Lake
Insyde Insydeh2o Uefi Bios<05.05.39.0001
Intel Skylake Mrd
Insyde Insydeh2o Uefi Bios<05.04.15.0001
Intel Skylake
Insyde Insydeh2o Uefi Bios<05.23.27.0001
Intel Coffee Lake
Intel Whiskey Lake
Event History
Nov 3, 2021
CVE Published
via MITRE·12:19 AM
Data Sourced
via MITRE·12:19 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-5955.
2
What is the severity of CVE-2020-5955?
CVE-2020-5955 has a severity rating of 9.8 (critical).
3
What is the affected software?
The affected software is Insyde Insydeh2o Uefi Bios versions up to 05.32.30.0001 and up to 05.41.35.0001.
4
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by calling Int15MicrocodeSmm to escalate privileges on Intel client chipsets.
5
Are Intel Ice Lake and Intel Tiger Lake vulnerable to this issue?
No, Intel Ice Lake and Intel Tiger Lake are not vulnerable to CVE-2020-5955.