Medium severity6.7NVD Advisory· Published Jun 16, 2021· Updated Aug 11, 2026
CVE-2020-27339
CVE-2020-27339
Description
In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19- cpe:2.3:o:siemens:ruggedcom_apr1808_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc127e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc227g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc277g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc327g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc377g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc427e_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_ipc477e_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:siemens:simatic_ipc477e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc627e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc647e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc677e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc847e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_itp1000_firmware:-:*:*:*:*:*:*:*
- Insyde/InsydeH2Odescription
Patches
Vulnerability mechanics
References
5- cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfnvdThird Party Advisory
- security.netapp.com/advisory/ntap-20220216-0005/nvdThird Party Advisory
- www.insyde.com/security-pledge/SA-2021001nvdVendor Advisory
- cert-portal.siemens.com/productcert/html/ssa-306654.htmlnvd
- www.kb.cert.org/vuls/id/796611nvd
News mentions
0No linked articles in our index yet.