CVE-2022-28806

An issue was discovered on certain Fujitsu LIEFBOOK devices (A3510, U9310, U7511/U7411/U7311, U9311, E5510/E5410, U7510/U7410/U7310, E459/E449) with BIOS versions before v1.09 (A3510), v2.17 (U9310), v2.30 (U7511/U7411/U7311), v2.33 (U9311), v2.23 (E5510), v2.19 (U7510/U7410), v2.13 (U7310), and v1.09 (E459/E449). The FjGabiFlashCoreAbstractionSmm driver registers a Software System Management Interrupt (SWSMI) handler that is not sufficiently validated to ensure that the CommBuffer (or any other communication buffer's nested contents) are not pointing to SMRAM contents. A potential attacker can therefore write fixed data to SMRAM, which could lead to data corruption inside this memory (e.g., change the SMI handler's code or modify SMRAM map structures to break input pointer validation for other SMI handlers). Thus, the attacker could elevate privileges from ring 0 to ring -2 and execute arbitrary code in SMM.

• CWE-787

• http://www.fmworld.net/biz/common/insyde/20220210/Vendor Advisory
• https://kb.cert.org/vuls/id/796611Third Party Advisory, US Government Resource
• https://support.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-FCCL-IS-2021-090903-Security-Advisory.aspVendor Advisory
• https://www.binarly.io/advisoriesExploit, Third Party Advisory
• http://www.fmworld.net/biz/common/insyde/20220210/Vendor Advisory
• https://kb.cert.org/vuls/id/796611Third Party Advisory, US Government Resource
• https://support.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-FCCL-IS-2021-090903-Security-Advisory.aspVendor Advisory
• https://www.binarly.io/advisoriesExploit, Third Party Advisory
• https://www.kb.cert.org/vuls/id/796611

Published

May 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28796jbd2_journal_wait_updates in fs/jbd2/transaction.c in the Li…7
• CVE-2022-28799The TikTok application before 23.7.3 for Android allows acco…8.8
• CVE-2022-2880Requests forwarded by ReverseProxy include the raw query par…7.5
• CVE-2022-28802Code by Zapier before 2022-08-17 allowed intra-account privi…9.9
• CVE-2022-28803In SilverStripe Framework through 2022-04-07, Stored XSS can…5.4
• CVE-2022-28805singlevar in lparser.c in Lua from (including) 5.4.0 up to (…9.1
• CVE-2022-28807An issue was discovered in Open Design Alliance Drawings SDK…7.8
• CVE-2022-28808An issue was discovered in Open Design Alliance Drawings SDK…7.8
• CVE-2022-28809An issue was discovered in Open Design Alliance Drawings SDK…7.8
• CVE-2022-2881The underlying bug might cause read past end of the buffer a…8.2
• CVE-2022-28810Zoho ManageEngine ADSelfService Plus before build 6122 allow…6.8
• CVE-2022-28811In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Par…9.8