Details of VAR-202211-1460

ID

VAR-202211-1460

CVE

CVE-2022-35897

TITLE

Insyde InsydeH2O Buffer error vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-202211-3241

DESCRIPTION

An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. If the attacker modifies specific UEFI variables, it can cause a stack overflow, leading to arbitrary code execution. The specific variables are normally locked (read-only) at the OS level and therefore an attack would require direct SPI modification. If an attacker can change the values of at least two variables out of three (SecureBootEnforce, SecureBoot, RestoreBootSettings), it is possible to execute arbitrary code

Trust: 0.99

sources: NVD: CVE-2022-35897 // VULMON: CVE-2022-35897

IOT TAXONOMY

category:

['other device']

sub_category:

general

Trust: 0.1

sources: OTHER: None

AFFECTED PRODUCTS

vendor:	insyde	model:	kernel	scope:	lte	version:	5.5	Trust: 1.0
vendor:	insyde	model:	kernel	scope:	gte	version:	5.0	Trust: 1.0

sources: NVD: CVE-2022-35897

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2022-35897
value:	MEDIUM
Trust: 1.0
134c704f-9b21-4f2e-91b3-4a467353bcc0:	CVE-2022-35897
value:	MEDIUM
Trust: 1.0
CNNVD:	CNNVD-202211-3241
value:	MEDIUM
Trust: 0.6

nvd@nist.gov:	CVE-2022-35897
baseSeverity:	MEDIUM
baseScore:	6.8
vectorString:	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector:	PHYSICAL
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	0.9
impactScore:	5.9
version:	3.1
Trust: 2.0

sources: CNNVD: CNNVD-202211-3241 // NVD: CVE-2022-35897 // NVD: CVE-2022-35897

PROBLEMTYPE DATA

problemtype:

CWE-787

Trust: 1.0

sources: NVD: CVE-2022-35897

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202211-3241

PATCH

title:

Insyde InsydeH2O Buffer error vulnerability fix

url:

http://123.124.177.30/web/xxk/bdxqById.tag?id=215775

Trust: 0.6

sources: CNNVD: CNNVD-202211-3241

EXTERNAL IDS

db:	NVD	id:	CVE-2022-35897	Trust: 1.8
db:	CNNVD	id:	CNNVD-202211-3241	Trust: 0.6
db:	OTHER	id:	NONE	Trust: 0.1
db:	VULMON	id:	CVE-2022-35897	Trust: 0.1

sources: OTHER: None // VULMON: CVE-2022-35897 // CNNVD: CNNVD-202211-3241 // NVD: CVE-2022-35897

REFERENCES

url:	https://www.insyde.com/security-pledge	Trust: 1.7
url:	https://www.insyde.com/security-pledge/sa-2022041	Trust: 1.7
url:	https://cxsecurity.com/cveshow/cve-2022-35897/	Trust: 0.6
url:	https://nvd.nist.gov/vuln/detail/cve-2022-35897	Trust: 0.6
url:	https://ieeexplore.ieee.org/abstract/document/10769424	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: OTHER: None // VULMON: CVE-2022-35897 // CNNVD: CNNVD-202211-3241 // NVD: CVE-2022-35897

SOURCES

db:	OTHER	id:	-
db:	VULMON	id:	CVE-2022-35897
db:	CNNVD	id:	CNNVD-202211-3241
db:	NVD	id:	CVE-2022-35897

LAST UPDATE DATE

2025-04-30T22:12:55.099000+00:00

SOURCES UPDATE DATE

db:	VULMON	id:	CVE-2022-35897	date:	2022-11-21T00:00:00
db:	CNNVD	id:	CNNVD-202211-3241	date:	2022-12-01T00:00:00
db:	NVD	id:	CVE-2022-35897	date:	2025-04-30T16:15:21.733

SOURCES RELEASE DATE

db:	VULMON	id:	CVE-2022-35897	date:	2022-11-21T00:00:00
db:	CNNVD	id:	CNNVD-202211-3241	date:	2022-11-21T00:00:00
db:	NVD	id:	CVE-2022-35897	date:	2022-11-21T17:15:25.280