CVE-2022-32471 - CVE House
Back to Database
Status published Unknown CVE-2022-32471

An issue was discovered in IhisiSmm in Insyde InsydeH2O with...

Vulnerability Description

An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe driver uses the command buffer to pass input and output data. By modifying the command buffer contents with DMA after the input parameters have been checked but before they are used, the IHISI SMM code may be convinced to modify SMRAM or OS, leading to possible data corruption or escalation of privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-32471

Credits & Attribution

No credits recorded in the NVD database.

References

More from insyde

View All →
CVE-2022-46897
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-36448
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-36338
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-36337
An issue was discovered in Insyde InsydeH2O with kernel 5.0...
Unknown 0
CVE-2022-35897
An stack buffer overflow vulnerability leads to arbitrary code execution...
Unknown 0

Affected Vendor

Affected Software

insydeh2o
Vulnerable Versions:
5.0, 5.3, 5.4, 5.5

Timeline

Official Publish: February 15th, 2023
Last Modified: May 5th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.