Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. UEFI implementations do not correctly protect and validate information contained in the 'MeSetup' UEFI variable. On some systems, this variable can be overwritten using operating system APIs. Exploitation of this vulnerability could potentially lead to denial of service for the platform.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Insyde InsydeH2O 安全漏洞
Vulnerability Description
Insyde InsydeH2O是中国台湾系微（Insyde）公司的一个 C 语言源，它实现了新技术“EFI/UEFI”规范，旨在取代传统的 BIOS（基本输入/输出系统）。 Insyde InsydeH2O 5.0版本至5.5版本存在安全漏洞，该漏洞源于无法正确保护和验证变量中包含的信息，可以使用操作系统API覆盖此变量，攻击者利用该漏洞可能会导致平台拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A