SIPLUS IPC427E vulnerabilities

2 known vulnerabilities in SIPLUS IPC427E from Siemens. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  RUGGEDCOM APE1808 - BIOS: Out-of-bounds Write

  CVE-2022-24031Feb 3, 2022Siemens

  An issue was discovered in NvmExpressDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

• 7.5 High severity

  RUGGEDCOM APE1808 - BIOS: Out-of-bounds Write

  CVE-2022-24030Feb 3, 2022Siemens

  An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.