CVE-2022-24030
First published: Thu Feb 03 2022(Updated: )
An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Insyde InsydeH2O | >=5.0<5.08.41 | |
| Insyde InsydeH2O | >=5.1<5.16.41 | |
| Insyde InsydeH2O | >=5.2<5.26.41 | |
| Insyde InsydeH2O | >=5.3<5.35.41 | |
| Insyde InsydeH2O | >=5.4<5.43.41 | |
| Insyde InsydeH2O | >=5.5<5.51.41 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-24030?
CVE-2022-24030 is a vulnerability discovered in AhciBusDxe in Insyde InsydeH2O firmware with kernel versions 5.1 through 5.5.
What is the severity of CVE-2022-24030?
CVE-2022-24030 has a severity rating of 7.5 (high).
What is the affected software of CVE-2022-24030?
Insyde InsydeH2O firmware versions 5.0 through 5.5 are affected by CVE-2022-24030.
What is the impact of CVE-2022-24030?
Exploiting CVE-2022-24030 could lead to escalating privileges to System Management Mode (SMM).
How can I fix CVE-2022-24030?
To fix CVE-2022-24030, it is recommended to update to a patched version of the Insyde InsydeH2O firmware.
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/type
- agent/tags
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/insyde
- canonical/insyde insydeh2o
- version/insyde insydeh2o/5.0
- version/insyde insydeh2o/5.1
- version/insyde insydeh2o/5.2
- version/insyde insydeh2o/5.3
- version/insyde insydeh2o/5.4
- version/insyde insydeh2o/5.5