How severe is CVE-2024-25079?

CVE-2024-25079 has a CVSS v3 score of 7.4 (HIGH).

CVE-2024-25079

Name: insydeh2o
Author: insyde

7.4HIGH

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 befo

公開日: 5/15/2024更新日: 8/4/2025

説明

A memory corruption vulnerability in HddPassword in Insyde InsydeH2O kernel 5.2 before 05.29.09, kernel 5.3 before 05.38.09, kernel 5.4 before 05.46.09, kernel 5.5 before 05.54.09, and kernel 5.6 before 05.61.09 could lead to escalating privileges in SMM.

AI分析AIによる分析

影響を受ける製品

insydeinsydeh2o

参照

https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2024001
Vendor Advisory
https://www.insyde.com/security-pledge
Vendor Advisory
https://www.insyde.com/security-pledge/SA-2024001
Vendor Advisory