Security Advisory

CVE-2023-27373

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-08-07 00:00:00

Last updated 2025-03-07 19:25:36

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM.

← Browse all CVEs View on cve.org ↗