CVE-2023-39284 | THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Assigner	mitre
Reserved	2023-07-27
Published	2023-11-02
Updated	2024-09-05

Description

An issue was discovered in IhisiServicesSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There are arbitrary calls to SetVariable with unsanitized arguments in the SMI handler.

References

https://www.insyde.com/security-pledge

https://www.insyde.com/security-pledge/SA-2023056

cve.org CVE-2023-39284

nvd.nist.gov CVE-2023-39284

Download JSON

https://cve.threatint.com/CVE/CVE-2023-39284

Subscribe to our newsletter to learn more about our work.