VYPR
← All advisories
High severity7.8NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-12532

CVE-2019-12532

Description

Improper access control in the Insyde software tools may allow an authenticated user to potentially enable escalation of privilege, or information disclosure via local access. This is a software vulnerability, not a firmware issue. Affected tools include: H2OFFT version 3.02~5.28, 100.00.00.00~100.00.08.23 and 200.00.00.01~200.00.00.05, H2OOAE before version 200.00.00.02, H2OSDE before version 200.00.00.07, H2OUVE before version 200.00.02.02, H2OPCM before version 100.00.06.00, H2OELV before version 100.00.02.08.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • Insyde/H2OELV2 versions
    cpe:2.3:a:insyde:h2oelv:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:insyde:h2oelv:*:*:*:*:*:*:*:*range: <100.00.02.08
    • (no CPE)range: <100.00.02.08
  • Insyde/H2OFFT2 versions
    cpe:2.3:a:insyde:h2offt:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:insyde:h2offt:*:*:*:*:*:*:*:*range: >=3.02,<=5.28
    • (no CPE)range: 3.02~5.28, 100.00.00.00~100.00.08.23 and 200.00.00.01~200.00.00.05
  • Insyde/H2OOAE2 versions
    cpe:2.3:a:insyde:h2ooae:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:insyde:h2ooae:*:*:*:*:*:*:*:*range: <200.00.00.02
    • (no CPE)range: <200.00.00.02
  • Insyde/H2OPCM2 versions
    cpe:2.3:a:insyde:h2opcm:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:insyde:h2opcm:*:*:*:*:*:*:*:*range: <100.00.06.00
    • (no CPE)range: <100.00.06.00
  • Insyde/H2OSDE2 versions
    cpe:2.3:a:insyde:h2osde:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:insyde:h2osde:*:*:*:*:*:*:*:*range: <200.00.00.07
    • (no CPE)range: <200.00.00.07
  • Insyde/H2OUVE2 versions
    cpe:2.3:a:insyde:h2ouve:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:insyde:h2ouve:*:*:*:*:*:*:*:*range: <200.00.02.02
    • (no CPE)range: <200.00.02.02
  • Insyde/software toolsdescription
  • Insyde/Insyde software toolsllm-create

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.