High severity8.2NVD Advisory· Published Feb 3, 2022· Updated Aug 11, 2026
CVE-2021-33627
CVE-2021-33627
Description
An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11, and 5.5 before 05.52.11 affecting FwBlockServiceSmm. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17- cpe:2.3:o:siemens:simatic_field_pg_m5_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_field_pg_m6_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc127e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc227g_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc277g_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc327g_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc377g_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc427e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc477e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc627e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc647e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc677e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_ipc847e_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:siemens:simatic_itp1000_firmware:*:*:*:*:*:*:*:*
- Insyde/InsydeH2O Kerneldescription
Patches
Vulnerability mechanics
References
6- cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfnvdThird Party Advisory
- security.netapp.com/advisory/ntap-20220222-0002/nvdThird Party Advisory
- www.insyde.com/security-pledgenvdVendor Advisory
- www.insyde.com/security-pledge/SA-2022022nvdVendor Advisory
- cert-portal.siemens.com/productcert/html/ssa-306654.htmlnvd
- www.kb.cert.org/vuls/id/796611nvd
News mentions
0No linked articles in our index yet.