CVE-2022-35408
Last modified
CVE-2022-35408 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads to possible arbitrary code execution in SMM and escalation of privileges. EPSS estimates a 0.33% chance of exploitation in the next 30 days.
Description
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads to possible arbitrary code execution in SMM and escalation of privileges. An attacker could overwrite the function pointers in the EFI_BOOT_SERVICES table before the USB SMI handler triggers. (This is not exploitable from code running in the operating system.)
Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Insyde | Insydeh2o | >= 5.1, < 5.17.38 |
| Insyde | Insydeh2o | >= 5.2, < 05.27.28 |
| Insyde | Insydeh2o | >= 5.3, < 05.36.28 |
| Insyde | Insydeh2o | >= 5.4, < 05.44.28 |
| Insyde | Insydeh2o | >= 5.5, < 05.52.28 |
| Insyde | Insydeh2o | >= 5.0, < 05.09.38 |
References
- https://binarly.io/advisories/BRLY-2022-022/index.htmlExploit, Third Party Advisory
- https://www.insyde.com/security-pledgeVendor Advisory
- https://www.insyde.com/security-pledge/SA-2022031Vendor Advisory
- https://binarly.io/advisories/BRLY-2022-022/index.htmlExploit, Third Party Advisory
- https://www.insyde.com/security-pledgeVendor Advisory
- https://www.insyde.com/security-pledge/SA-2022031Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-35408?
How severe is CVE-2022-35408?
How do I fix CVE-2022-35408?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-35401An authentication bypass vulnerability exists in the get_IFT…8.1
- CVE-2022-35403Zoho ManageEngine ServiceDesk Plus before 13008, ServiceDesk…7.5
- CVE-2022-35404ManageEngine Password Manager Pro 12100 and prior and OPMana…8.2
- CVE-2022-35405Zoho ManageEngine Password Manager Pro before 12101 and PAM3…9.8
- CVE-2022-35406A URL disclosure issue was discovered in Burp Suite before 2…4.3
- CVE-2022-35407An issue was discovered in Insyde InsydeH2O with kernel 5.0 …7.8
- CVE-2022-35409An issue was discovered in Mbed TLS before 2.28.1 and 3.x be…9.1
- CVE-2022-3541A vulnerability classified as critical has been found in Lin…7.8
- CVE-2022-35410mat2 (aka metadata anonymisation toolkit) before 0.13.0 allo…7.5
- CVE-2022-35411rpc.py through 0.6.0 allows Remote Code Execution because an…9.8
- CVE-2022-35412Digital Guardian Agent 7.7.4.0042 allows an administrator (w…5.1
- CVE-2022-35413WAPPLES through 6.0 has a hardcoded systemi account. A threa…9.8
Are you affected by CVE-2022-35408?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST