High severity7.5NVD Advisory· Published Feb 3, 2022· Updated Aug 11, 2026
CVE-2021-33625
CVE-2021-33625
Description
An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20- cpe:2.3:o:netapp:fas\/aff_bios:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc127e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc227g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc277g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc327g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc377g_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc427e_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:siemens:simatic_ipc477e_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:siemens:simatic_ipc477e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc477e_pro_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc627e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc647e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc677e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc847e_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_itp1000_firmware:-:*:*:*:*:*:*:*
- Insyde/InsydeH2Odescription
Patches
Vulnerability mechanics
References
6- cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfnvdThird Party Advisory
- security.netapp.com/advisory/ntap-20220222-0004/nvdThird Party Advisory
- www.insyde.com/security-pledgenvdVendor Advisory
- www.insyde.com/security-pledge/SA-2022014nvdVendor Advisory
- cert-portal.siemens.com/productcert/html/ssa-306654.htmlnvd
- www.kb.cert.org/vuls/id/796611nvd
News mentions
0No linked articles in our index yet.