CVE-2021-33626 : A vulnerability exists in SMM (System Management Mode) branch that registers a S

A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code execution.

Published 2021-10-01 03:15:07

Updated 2022-04-24 02:03:42

Source MITRE

View at NVD, CVE.org

Vulnerability category: File inclusion

Products affected by CVE-2021-33626

Siemens » Simatic Ipc427e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc427e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc427e » Version: N/A
Siemens » Simatic Ipc477e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc477e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc477e » Version: N/A
Siemens » Simatic Itp1000 Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_itp1000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Itp1000 » Version: N/A
Siemens » Simatic Field Pg M5 Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Field Pg M5 » Version: N/A
Siemens » Simatic Ipc477e Pro Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc477e Pro » Version: N/A
Siemens » Simatic Field Pg M6 Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Field Pg M6 » Version: N/A
Siemens » Simatic Ipc127e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc127e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc127e » Version: N/A
Siemens » Simatic Ipc227g Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc227g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc227g » Version: N/A
Siemens » Simatic Ipc277g Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc277g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc277g » Version: N/A
Siemens » Simatic Ipc327g Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc327g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc327g » Version: N/A
Siemens » Simatic Ipc377g Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc377g_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc377g » Version: N/A
Siemens » Simatic Ipc627e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc627e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc627e » Version: N/A
Siemens » Simatic Ipc647e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc647e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc647e » Version: N/A
Siemens » Simatic Ipc677e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc677e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc677e » Version: N/A
Siemens » Simatic Ipc847e Firmware » Version: N/A
cpe:2.3:o:siemens:simatic_ipc847e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Ipc847e » Version: N/A
Siemens » Ruggedcom Apr1808 Firmware » Version: N/A
cpe:2.3:o:siemens:ruggedcom_apr1808_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Ruggedcom Apr1808 » Version: N/A
Insyde » Insydeh2o
Versions from including (>=) 5.4 and before (<) 5.43.25
cpe:2.3:o:insyde:insydeh2o:*:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o
Versions from including (>=) 5.3 and before (<) 5.34.44
cpe:2.3:o:insyde:insydeh2o:*:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o
Versions from including (>=) 5.1 and before (<) 5.16.25
cpe:2.3:o:insyde:insydeh2o:*:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o
Versions from including (>=) 5.2 and before (<) 5.25.44
cpe:2.3:o:insyde:insydeh2o:*:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o
Versions from including (>=) 5.4 and before (<) 5.42.44
cpe:2.3:o:insyde:insydeh2o:*:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o
Versions from including (>=) 5.3 and before (<) 5.35.25
cpe:2.3:o:insyde:insydeh2o:*:*:*:*:*:*:*:*
Matching versions
Insyde » Insydeh2o
Versions from including (>=) 5.2 and before (<) 5.26.25
cpe:2.3:o:insyde:insydeh2o:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2021-33626

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 18 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-33626

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-33626

CWE-829 Inclusion of Functionality from Untrusted Control Sphere

The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-33626

https://security.netapp.com/advisory/ntap-20220216-0006/

CVE-2021-33626 InsydeH2O Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf

Third Party Advisory

CVEs referencing this url
https://www.insyde.com/security-pledge

Insyde's Security Pledge | Insyde Software
Vendor Advisory

CVEs referencing this url
https://www.insyde.com/security-pledge/SA-2021001

Security Advisory | Insyde Software
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-33626

Products affected by CVE-2021-33626

Exploit prediction scoring system (EPSS) score for CVE-2021-33626

CVSS scores for CVE-2021-33626

CWE ids for CVE-2021-33626

References for CVE-2021-33626