CVE-2021-41837
An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.
- Score
- CVSS 3.1 8.2 High
- Status
- Modified - cve@mitre.org
- Published
- 2022-02-03
- Last modified
- 2026-08-11
- Weaknesses
- CWE-119
Affected products
- Insydeh2o (Insyde)
- Ruggedcom Ape1808 - Bios (Siemens)
- Simatic Field Pg M5 (Siemens)
- Simatic Field Pg M5 Firmware (Siemens)
- Simatic Field Pg M6 (Siemens)
- Simatic Field Pg M6 Firmware (Siemens)
- Simatic Ipc127e (Siemens)
- Simatic Ipc127e Firmware (Siemens)
- Simatic Ipc227g (Siemens)
- Simatic Ipc227g Firmware (Siemens)
- Simatic Ipc277g (Siemens)
- Simatic Ipc277g Firmware (Siemens)
- Simatic Ipc327g (Siemens)
- Simatic Ipc327g Firmware (Siemens)
- Simatic Ipc377g (Siemens)
- Simatic Ipc377g Firmware (Siemens)
- Simatic Ipc427e (Siemens)
- Simatic Ipc427e Firmware (Siemens)
- Simatic Ipc477e (Siemens)
- Simatic Ipc477e Firmware (Siemens)
- Simatic Ipc477e Pro (Siemens)
- Simatic Ipc627e (Siemens)
- Simatic Ipc627e Firmware (Siemens)
- Simatic Ipc647e (Siemens)
- Simatic Ipc647e Firmware (Siemens)
- Simatic Ipc677e (Siemens)
- Simatic Ipc677e Firmware (Siemens)
- Simatic Ipc847e (Siemens)
- Simatic Ipc847e Firmware (Siemens)
- Simatic Itp1000 (Siemens)
- Simatic Itp1000 Firmware (Siemens)
- Simaticipc277g Pro (Siemens)
- Siplus Ipc427e (Siemens)
References
- https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
- https://security.netapp.com/advisory/ntap-20220222-0003/
- https://www.insyde.com/security-pledge
- https://www.insyde.com/security-pledge/SA-2022024
- https://www.kb.cert.org/vuls/id/796611
- https://cert-portal.siemens.com/productcert/html/ssa-306654.html
