CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5953

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.9%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 6.9

References

Products affected by CVE-2020-5953

Insyde » Insydeh2o » Version: 5.12.09.0074

cpe:2.3:a:insyde:insydeh2o:5.12.09.0074
Insyde » Insydeh2o » Version: 5.23.04.0045

cpe:2.3:a:insyde:insydeh2o:5.23.04.0045
Insyde » Insydeh2o » Version: 5.23.45.0023

cpe:2.3:a:insyde:insydeh2o:5.23.45.0023
Insyde » Insydeh2o » Version: 5.33.15.0034

cpe:2.3:a:insyde:insydeh2o:5.33.15.0034
Insyde » Insydeh2o » Version: 5.34.03.0029

cpe:2.3:a:insyde:insydeh2o:5.34.03.0029
Insyde » Insydeh2o » Version: 5.42.03.0010

cpe:2.3:a:insyde:insydeh2o:5.42.03.0010
Siemens » Ruggedcom Ape1808 » Version: N/A

cpe:2.3:h:siemens:ruggedcom_ape1808:-
Siemens » Simatic Field Pg M5 » Version: N/A

cpe:2.3:h:siemens:simatic_field_pg_m5:-
Siemens » Simatic Field Pg M6 » Version: N/A

cpe:2.3:h:siemens:simatic_field_pg_m6:-
Siemens » Simatic Ipc127e » Version: N/A

cpe:2.3:h:siemens:simatic_ipc127e:-
Siemens » Simatic Ipc227g » Version: N/A

cpe:2.3:h:siemens:simatic_ipc227g:-
Siemens » Simatic Ipc277g » Version: N/A

cpe:2.3:h:siemens:simatic_ipc277g:-
Siemens » Simatic Ipc327g » Version: N/A

cpe:2.3:h:siemens:simatic_ipc327g:-
Siemens » Simatic Ipc377g » Version: N/A

cpe:2.3:h:siemens:simatic_ipc377g:-
Siemens » Simatic Ipc427e » Version: N/A

cpe:2.3:h:siemens:simatic_ipc427e:-
Siemens » Simatic Ipc477e » Version: N/A

cpe:2.3:h:siemens:simatic_ipc477e:-
Siemens » Simatic Ipc477e Pro » Version: N/A

cpe:2.3:h:siemens:simatic_ipc477e_pro:-
Siemens » Simatic Ipc627e » Version: N/A

cpe:2.3:h:siemens:simatic_ipc627e:-
Siemens » Simatic Ipc647e » Version: N/A

cpe:2.3:h:siemens:simatic_ipc647e:-
Siemens » Simatic Ipc677e » Version: N/A

cpe:2.3:h:siemens:simatic_ipc677e:-
Siemens » Simatic Ipc847e » Version: N/A

cpe:2.3:h:siemens:simatic_ipc847e:-
Siemens » Simatic Itp1000 » Version: N/A

cpe:2.3:h:siemens:simatic_itp1000:-
Siemens » Ruggedcom Ape1808 Firmware » Version: N/A

cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-
Siemens » Simatic Field Pg M5 Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:-
Siemens » Simatic Field Pg M6 Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:-
Siemens » Simatic Ipc127e Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc127e_firmware:-
Siemens » Simatic Ipc227g Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc227g_firmware:-
Siemens » Simatic Ipc277g Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc277g_firmware:-
Siemens » Simatic Ipc327g Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc327g_firmware:-
Siemens » Simatic Ipc377g Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc377g_firmware:-
Siemens » Simatic Ipc427e Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc427e_firmware:-
Siemens » Simatic Ipc477e Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc477e_firmware:-
Siemens » Simatic Ipc477e Pro Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:-
Siemens » Simatic Ipc627e Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc627e_firmware:-
Siemens » Simatic Ipc647e Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc647e_firmware:-
Siemens » Simatic Ipc677e Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc677e_firmware:-
Siemens » Simatic Ipc847e Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_ipc847e_firmware:-
Siemens » Simatic Itp1000 Firmware » Version: N/A

cpe:2.3:o:siemens:simatic_itp1000_firmware:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-5953

Products

Pricing

Contact Us