vulnerability
Aruba AOS-10: CVE-2021-33627: SMM Privilege Escalation Vulnerability in FwBlockServiceSmm
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:L/AC:L/Au:N/C:C/I:C/A:C) | Feb 1, 2022 | Jan 14, 2025 | Jul 2, 2025 |
Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Feb 1, 2022
Added
Jan 14, 2025
Modified
Jul 2, 2025
Description
An issue was discovered in Insyde InsydeH2O 5.x, affecting FwBlockServiceSmm. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses
Solution
aruba-aos-10-cve-2021-33627
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.