CVE-2023-22615

8.4 highEPSS 0.2%

High (8.4) in insyde insydeh2o. EPSS 0.2% chance of exploitation in the next 30 days.

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an address in the RCX save state register that overlaps SMRAM, thereby coercing an IHISI subfunction handler to overwrite private SMRAM.

Severity

CVSS 3.1

8.4 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2023-04-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

insyde:insydeh2o

References

https://www.insyde.com/security-pledge
https://www.insyde.com/security-pledge/SA-2023021
https://www.insyde.com/security-pledge
https://www.insyde.com/security-pledge/SA-2023021

Check your stack JSON