What’s Vulnerable › Vulnerabilities

CVE-2022-35408

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-09-22 · updated 2026-06-17
• Weakness: CWE-123

Description

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads to possible arbitrary code execution in SMM and escalation of privileges. An attacker could overwrite the function pointers in the EFI_BOOT_SERVICES table before the USB SMI handler triggers. (This is not exploitable from code running in the operating system.)

Affected products

• Insydeh2O: from 5.1 before 5.17.38; from 5.2 before 05.27.28; from 5.3 before 05.36.28; from 5.4 before 05.44.28; from 5.5 before 05.52.28; from 5.0 before 05.09.38 — fixed in 05.09.38, 05.27.28, 05.36.28, 05.44.28, 05.52.28, 5.17.38

How to fix

Upgrade to a fixed version: Insydeh2O 05.09.38, 05.27.28, 05.36.28, 05.44.28. Check the vendor advisory for mitigations.

References

• https://binarly.io/advisories/BRLY-2022-022/index.html
• https://www.insyde.com/security-pledge
• https://www.insyde.com/security-pledge/SA-2022031
• https://binarly.io/advisories/BRLY-2022-022/index.html
• https://www.insyde.com/security-pledge
• https://www.insyde.com/security-pledge/SA-2022031

Get alerted when CVE-2022-35408 or the next vulnerability affects your stack