CVE-2020-5953 : A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI h

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).

Published 2022-02-03 01:15:08

Updated 2022-04-12 18:17:19

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2020-5953

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 18 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2020-5953

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.9	MEDIUM	AV:L/AC:M/Au:N/C:C/I:C/A:C	3.4	10.0	NIST
Access Vector: Local Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.5	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H	0.8	6.0	NIST
Attack Vector: Local Attack Complexity: High Privileges Required: High User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

References for CVE-2020-5953

Products affected by CVE-2020-5953

Siemens » Simatic Ipc427e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc427e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc427e » Version: N/A
Siemens » Simatic Ipc477e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc477e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc477e » Version: N/A
Siemens » Simatic Itp1000 Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_itp1000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Itp1000 » Version: N/A
Siemens » Simatic Field Pg M5 Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Field Pg M5 » Version: N/A
Siemens » Simatic Ipc477e Pro Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc477e Pro » Version: N/A
Siemens » Simatic Field Pg M6 Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Field Pg M6 » Version: N/A
Siemens » Simatic Ipc127e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc127e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc127e » Version: N/A
Siemens » Simatic Ipc227g Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc227g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc227g » Version: N/A
Siemens » Simatic Ipc277g Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc277g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc277g » Version: N/A
Siemens » Simatic Ipc327g Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc327g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc327g » Version: N/A
Siemens » Simatic Ipc377g Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc377g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc377g » Version: N/A
Siemens » Simatic Ipc627e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc627e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc627e » Version: N/A
Siemens » Simatic Ipc647e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc647e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc647e » Version: N/A
Siemens » Simatic Ipc677e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc677e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc677e » Version: N/A
Siemens » Simatic Ipc847e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc847e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc847e » Version: N/A
Siemens » Ruggedcom Ape1808 Firmware » Version: N/A
cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Ruggedcom Ape1808 » Version: N/A
Insyde » Insydeh2o » Version: 5.12.09.0074
cpe:2.3:a:insyde:insydeh2o:5.12.09.0074:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o » Version: 5.23.04.0045
cpe:2.3:a:insyde:insydeh2o:5.23.04.0045:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o » Version: 5.23.45.0023
cpe:2.3:a:insyde:insydeh2o:5.23.45.0023:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o » Version: 5.33.15.0034
cpe:2.3:a:insyde:insydeh2o:5.33.15.0034:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o » Version: 5.34.03.0029
cpe:2.3:a:insyde:insydeh2o:5.34.03.0029:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o » Version: 5.42.03.0010
cpe:2.3:a:insyde:insydeh2o:5.42.03.0010:*:*:*:*:*:*:*
Matching versions

Vulnerability Details : CVE-2020-5953

Exploit prediction scoring system (EPSS) score for CVE-2020-5953

CVSS scores for CVE-2020-5953

References for CVE-2020-5953

Products affected by CVE-2020-5953