CVE-2022-35408 Privilege escalation in n/a
An SMM callout vulnerability in InsydeH2O firmware allows attackers to overwrite function pointers, leading to arbitrary code execution and privilege escalation in System Management Mode.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-35408?
CVE-2022-35408 is a high-severity vulnerability in Insyde Insydeh2o, published on 22 Sep 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads to possible arbitrary code execution in SMM and escalation of privileges. An attacker could overwrite the function pointers in the EFI_BOOT_SERVICES table before the USB SMI handler triggers. (This is not exploitable from code running in the operating system.)
Weakness: CWE-123
Which versions are affected by CVE-2022-35408?
It affects 1 product.
Products include Insyde Insydeh2o.
How do I fix CVE-2022-35408?
No fix has been published for CVE-2022-35408 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-35408 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-35408 exists.
Other vulnerabilities in Insyde Insydeh2o
Sources
Also known as GHSA-49c7-gf66-cc93.