VULNERABILITY INTELLIGENCE

CVE-2023-39283

CVSS score7.8 HIGH
EPSS probability0.19%
CISA KEVNot currently listed
Published2023-11-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An SMM memory corruption vulnerability in the SMM driver (SMRAM write) in CsmInt10HookSmm in Insyde InsydeH2O with kernel 5.0 through 5.5 allows attackers to send arbitrary data to SMM which could lead to privilege escalation.

Weakness classification

  • nvd@nist.gov: CWE-787

Primary references