SI
Product
Simatic Ipc677e Firmware
16
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 9Low 0
Watch
Add Simatic Ipc677e Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-42554 | 8.2 | Feb 3 | An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before… Affected: All versions, or not specified |
| CVE-2021-41838 | 8.2 | Feb 3 | An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O Affected: All versions, or not specified |
| CVE-2021-41837 | 8.2 | Feb 3 | An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O Affected: All versions, or not specified |
| CVE-2021-33627 | 8.2 | Feb 3 | An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11, and 5.5 before 05.52.11… Affected: All versions, or not specified |
| CVE-2021-33626 | 7.8 | Oct 1 | A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values… Affected: All versions, or not specified |
| CVE-2021-33625 | 7.5 | Feb 3 | An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword Affected: All versions, or not specified |
| CVE-2020-5953 | 7.5 | Feb 3 | A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer… Affected: All versions, or not specified |
| CVE-2021-42059 | 6.7 | Feb 3 | An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41, and Kernel 5.4 before… Affected: All versions, or not specified |
| CVE-2020-27339 | 6.7 | Jun 16 | In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware… Affected: All versions, or not specified |
| CVE-2020-8703 | 6.7 | Jun 9 | Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32 and 15.0.22 may allow a… Affected: before 25.02.10 |
| CVE-2020-12357 | 6.7 | Jun 9 | Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: All versions, or not specified |
| CVE-2020-8704 | 6.4 | Jun 9 | Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially enable escalation of privilege via local access Affected: before 25.02.10 |
| CVE-2020-8670 | 6.4 | Jun 9 | Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access Affected: before 25.02.10 |
| CVE-2020-8698 | 5.5 | Nov 12 | Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access Affected: before 25.02.08 |
| CVE-2020-24507 | 4.4 | Jun 9 | Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.47, 13.30.17, 14.1.53, 14.5.32, 13.50.11 and 15.0.22 may… Affected: before 25.02.10 |
| CVE-2020-24506 | 4.4 | Jun 9 | Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 may allow a privileged user to potentially enable information… Affected: before 25.02.10 |
Showing 16