CVE-2021-42554

An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
• https://security.netapp.com/advisory/ntap-20220216-0007/Third Party Advisory
• https://www.insyde.com/security-pledgeVendor Advisory
• https://www.insyde.com/security-pledge/SA-2022012Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
• https://security.netapp.com/advisory/ntap-20220216-0007/Third Party Advisory
• https://www.insyde.com/security-pledgeVendor Advisory
• https://www.insyde.com/security-pledge/SA-2022012Vendor Advisory
• https://www.kb.cert.org/vuls/id/796611
• https://cert-portal.siemens.com/productcert/html/ssa-306654.html

Published

Feb 3, 2022

Last Modified

Aug 11, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42549Insufficient Input Validation in the search functionality of…6.1
• CVE-2021-4255A vulnerability was found in ctrlo lenio and classified as p…6.1
• CVE-2021-42550In logback version 1.2.7 and prior versions, an attacker wit…6.6
• CVE-2021-42551Cross-site Scripting (XSS) vulnerability in the search funct…6.1
• CVE-2021-42552Cross-site Scripting (XSS) vulnerability in ArchivistaBox we…6.1
• CVE-2021-42553A buffer overflow vulnerability in stm32_mw_usb_host of STMi…9.8
• CVE-2021-42555Pexip Infinity before 26.2 allows temporary remote Denial of…7.5
• CVE-2021-42556Rasa X before 0.42.4 allows Directory Traversal during archi…5.5
• CVE-2021-42557In Jeedom through 4.1.19, a bug allows a remote attacker to …7.5
• CVE-2021-42558An issue was discovered in CALDERA 2.8.1. It contains multip…6.1
• CVE-2021-42559An issue was discovered in CALDERA 2.8.1. It contains multip…8.8
• CVE-2021-4256A vulnerability was found in ctrlo lenio. It has been classi…6.1