High severity8.8NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026
CVE-2023-22614
CVE-2023-22614
Description
An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An attacker can induce memory corruption in SMM by supplying malformed inputs to the BIOS Guard SMI handler.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:insyde:insydeh2o:05.42.52.0026:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:insyde:insydeh2o:05.42.52.0026:*:*:*:*:*:*:*
- cpe:2.3:a:insyde:insydeh2o:05.43.01.0026:*:*:*:*:*:*:*
- cpe:2.3:a:insyde:insydeh2o:05.43.12.0056:*:*:*:*:*:*:*
- cpe:2.3:a:insyde:insydeh2o:05.44.34.0054:*:*:*:*:*:*:*
- cpe:2.3:a:insyde:insydeh2o:05.44.45.0015:*:*:*:*:*:*:*
- cpe:2.3:a:insyde:insydeh2o:05.44.45.0028:*:*:*:*:*:*:*
- (no CPE)range: 5.0 - 5.5
- Insyde/InsydeH2Odescription
Patches
Vulnerability mechanics
References
3- research.nccgroup.com/2023/04/11/stepping-insyde-system-management-mode/nvdExploitThird Party Advisory
- www.insyde.com/security-pledgenvdVendor Advisory
- www.insyde.com/security-pledge/SA-2023020nvdVendor Advisory
News mentions
0No linked articles in our index yet.