What’s Vulnerable › Vulnerabilities

CVE-2020-5955

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-11-03 · updated 2026-06-17

Description

An issue was discovered in Int15MicrocodeSmm in Insyde InsydeH2O before 2021-10-14 on Intel client chipsets. A caller may be able to escalate privileges.

Affected products

• Insydeh2O Uefi Bios: before 05.32.30.0001; before 05.41.35.0001; before 05.42.11.0026; before 05.04.21.0068; before 05.42.09.0003; before 05.21.51.0040 — fixed in 05.04.15.0001, 05.04.21.0068, 05.05.39.0001, 05.10.48.0001, 05.11.26.0015, 05.12.09.0075

How to fix

Upgrade to a fixed version: Insydeh2O Uefi Bios 05.04.15.0001, 05.04.21.0068, 05.05.39.0001, 05.10.48.0001. Check the vendor advisory for mitigations.

References

• https://security.netapp.com/advisory/ntap-20220223-0003/
• https://www.insyde.com/products
• https://www.insyde.com/security-pledge/SA-2021002
• https://security.netapp.com/advisory/ntap-20220223-0003/
• https://www.insyde.com/products
• https://www.insyde.com/security-pledge/SA-2021002

Get alerted when CVE-2020-5955 or the next vulnerability affects your stack