CVE-2020-27339

moderate-risk

Published 2021-06-16

In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).

Do I need to act?

0.06% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.7/10 Medium

LOCAL / LOW complexity

Affected Products (17)

Insydeh2O

Ruggedcom Apr1808 Firmware

Simatic Field Pg M5 Firmware

Simatic Field Pg M6 Firmware

Simatic Ipc127E Firmware

Simatic Ipc227G Firmware

Simatic Ipc277G Firmware

Simatic Ipc327G Firmware

Simatic Ipc377G Firmware

Simatic Ipc427E Firmware

Simatic Ipc477E Firmware

Simatic Ipc477E Pro Firmware

Simatic Ipc627E Firmware

Simatic Ipc647E Firmware

Simatic Ipc677E Firmware

Simatic Ipc847E Firmware

Simatic Itp1000 Firmware

Affected Vendors

Siemens Insyde

References (7)

Third Party Advisory https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf

Third Party Advisory https://security.netapp.com/advisory/ntap-20220216-0005/

Vendor Advisory https://www.insyde.com/security-pledge/SA-2021001

Third Party Advisory https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf

Third Party Advisory https://security.netapp.com/advisory/ntap-20220216-0005/

Vendor Advisory https://www.insyde.com/security-pledge/SA-2021001

https://www.kb.cert.org/vuls/id/796611

/ 100

moderate-risk

Severity 21/34 · High

Exploitability 0/34 · Minimal

Exposure 19/34 · Moderate