CVE-2023-31041

7.5 highEPSS 0.4%

High (7.5) in insyde insydeh2o. EPSS 0.4% chance of exploitation in the next 30 days.

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-312
Published: 2023-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

insyde:insydeh2o

References

https://www.insyde.com/security-pledge/SA-2023047
https://www.insyde.com/security-pledge/SA-2023047

Check your stack JSON