2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2021-41838" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2022-02-03T02:15:07.080" ,
"lastModified" : "2022-03-01T19:42:25.170" ,
"vulnStatus" : "Analyzed" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of a Numeric Range Comparison Without a Minimum Check."
} ,
{
"lang" : "es" ,
"value" : "Se ha descubierto un problema en SdHostDriver en el kernel versi\u00f3n 5.0 hasta la versi\u00f3n 5.5 en InsydeH2O. Hay una llamada SMM que permite a un atacante acceder al modo de gesti\u00f3n del sistema y ejecutar c\u00f3digo arbitrario. Esto ocurre debido a una comparaci\u00f3n de rango num\u00e9rico sin una comprobaci\u00f3n m\u00ednima."
}
] ,
"metrics" : {
"cvssMetricV31" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" ,
"attackVector" : "LOCAL" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "HIGH" ,
"userInteraction" : "NONE" ,
"scope" : "CHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "HIGH" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 8.2 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 1.5 ,
"impactScore" : 6.0
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C" ,
"accessVector" : "LOCAL" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "COMPLETE" ,
"integrityImpact" : "COMPLETE" ,
"availabilityImpact" : "COMPLETE" ,
"baseScore" : 7.2
} ,
"baseSeverity" : "HIGH" ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 10.0 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-119"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.1" ,
"versionEndExcluding" : "5.16.42" ,
"matchCriteriaId" : "A4803E0A-D93A-4863-B9F6-378C3D73F743"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.2" ,
"versionEndExcluding" : "5.26.42" ,
"matchCriteriaId" : "65D09B40-7B64-4890-AEA5-AE1EB5201CA1"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.3" ,
"versionEndExcluding" : "5.35.42" ,
"matchCriteriaId" : "E38FAADD-CEC5-421F-BBD7-1152B95B2A10"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.4" ,
"versionEndExcluding" : "5.43.42" ,
"matchCriteriaId" : "18B07541-9DA8-41A0-9D69-861C159AB6AA"
}
]
}
]
} ,
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*" ,
"versionStartIncluding" : "5.5" ,
"versionEndExcluding" : "5.51.42" ,
"matchCriteriaId" : "7F835C39-35FE-45F8-9314-C7E072F3627D"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "324ADC7E-AECD-4B7D-8571-5399542C2BF6"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m5:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "506DEE00-30D2-4E29-9645-757EB8778C0F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "480C5657-5C05-40F5-B76A-E67119727ED8"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_field_pg_m6:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "8F3C3E60-7C36-4F5D-B454-97C9D0FD9459"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc127e_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2AEB5AD1-3973-4150-BEA2-C9DE0B98222F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc127e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F63C0B17-60E2-4240-92FD-4B7C7D8F2C8B"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc227g_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C3F52F29-0ACF-4ECC-927A-0CB27399E5D9"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc227g:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0D1E85AC-1305-4C5E-AD8B-39B2654F6057"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc277g_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F203C449-2B5C-47A1-BF3D-8DCFD29F0B18"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc277g:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "320F5752-86B3-4C08-89D0-02272753A6D0"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc327g_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A37FB5EC-BB64-472C-81FC-8EEF238E3C12"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc327g:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EC7303D1-CC95-42C7-B843-C3B3B3336669"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc377g_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "45013BCA-3897-4D58-81FA-D8CB9D19268C"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc377g:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FDD6F034-BC50-4223-AE5D-319F04C866A8"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F6422BF3-01B7-443B-BD2B-80E45D7C3F5F"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc427e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A40D0CDB-7BE6-491F-B730-3B4E10CA159A"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "696F47E6-C1CA-4A58-A91F-4B3EA92954AF"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc477e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FDF9D4C3-1892-48FA-95B4-835B636A4005"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F712060C-ECDB-4BC7-B9B9-468B41DE615B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc627e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9D9AF082-8345-4BE1-B1FC-6E0316BB833B"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D511C170-65E5-416D-B7CE-557A503F25AE"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc647e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E430C4C5-D887-47C6-B50F-66EEE9519151"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "577C19F5-82ED-46DF-91CC-A074DE99EBDD"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc677e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5F9FA42D-B2F0-456F-89B7-6A5789787FBA"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CEF4592C-5DB3-45F4-B354-59701BBA0C08"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_ipc847e:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1157418C-14C4-43C4-B63E-7E98D868A94F"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "87F0538B-ED6E-40C7-9C2A-4C5DC3D2935E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:siemens:simatic_itp1000:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "187C6D51-5B86-484D-AE0F-26D1C9465580"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Third Party Advisory"
]
} ,
{
"url" : "https://security.netapp.com/advisory/ntap-20220222-0001/" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Third Party Advisory"
]
} ,
{
"url" : "https://www.insyde.com/security-pledge" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "https://www.insyde.com/security-pledge/SA-2022023" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
}
]
}
