CVE-2020-5953

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).

• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
• https://security.netapp.com/advisory/ntap-20220222-0005/Third Party Advisory
• https://www.insyde.com/productsProduct, Vendor Advisory
• https://www.insyde.com/security-pledgeVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
• https://security.netapp.com/advisory/ntap-20220222-0005/Third Party Advisory
• https://www.insyde.com/productsProduct, Vendor Advisory
• https://www.insyde.com/security-pledgeVendor Advisory
• https://www.kb.cert.org/vuls/id/796611
• https://cert-portal.siemens.com/productcert/html/ssa-306654.html

Published

Feb 3, 2022

Last Modified

Aug 11, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5945In BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, and 14.…8.4
• CVE-2020-5946In BIG-IP Advanced WAF and FPS versions 16.0.0-16.0.0.1, 15.…7.5
• CVE-2020-5947In versions 16.0.0-16.0.0.1 and 15.1.0-15.1.1, on specific B…4.3
• CVE-2020-5948On BIG-IP versions 16.0.0-16.0.0.1, 15.1.0-15.1.0.5, 14.1.0-…9.6
• CVE-2020-5949On BIG-IP versions 14.0.0-14.0.1 and 13.1.0-13.1.3.4, certai…7.5
• CVE-2020-5950On BIG-IP 14.1.0-14.1.2.6, undisclosed endpoints in iControl…5.3
• CVE-2020-5955An issue was discovered in Int15MicrocodeSmm in Insyde Insyd…9.8
• CVE-2020-5956An issue was discovered in SdLegacySmm in Insyde InsydeH2O w…7.5
• CVE-2020-5957NVIDIA Windows GPU Display Driver, all versions, contains a …7.8
• CVE-2020-5958NVIDIA Windows GPU Display Driver, all versions, contains a …7.8
• CVE-2020-5959NVIDIA Virtual GPU Manager, all versions, contains a vulnera…5.5
• CVE-2020-5960NVIDIA Virtual GPU Manager contains a vulnerability in the k…5.5