[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frV9sbL1CA6YA9ZrvYQYRIAD3FbNLOvca0e_hK5hFgSM":3,"g5a-risk:CVE-2023-22616":116},{"success":4,"data":5,"meta":113},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":64,"weaknesses":65,"weaknessesCount":42,"isActivelyExploited":74,"cisaInfo":26,"otxData":26,"relatedBlogPosts":75,"seoMetadata":76,"configurations":101,"relatedVendorCves":111,"notableEvents":112},"CVE-2023-22616","What is CVE-2023-22616?","An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before use. The IhisiSmm driver does not check the value of a save state register before use. Due to insufficient input validation, an attacker can corrupt SMRAM.","An issue was discovered in Insyde InsydeH2O with kernel 5.2 through 5.5. The Save State register is not checked before use. The IhisiSmm driver does not chec...","2023-04-12T13:15:07.37","2025-02-10T17:15:16.2",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00369,[33,33,33,33,33,33,33],"High",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"insyde","insydeh2o","*","cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",1,[44,50,55,58,60,62],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fresearch.nccgroup.com\u002F2023\u002F04\u002F11\u002Fstepping-insyde-system-management-mode\u002F","Nccgroup",[48,49],"Exploit","Third Party Advisory",{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge","Insyde",[54],"Vendor Advisory",{"url":56,"source":52,"tags":57},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge\u002FSA-2023022",[54],{"url":45,"source":46,"tags":59},[48,49],{"url":51,"source":52,"tags":61},[54],{"url":56,"source":52,"tags":63},[54],6,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-610","Externally Controlled Reference to a Resource in Another Sphere","The product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.","","Draft","Class","Simple",false,[],{"title":77,"metaDescription":78,"keywords":79,"canonicalUrl":80,"structuredData":81},"What is CVE-2023-22616? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2023-22616, a high severity cyber security vulnerability from 2023. An issue was discovered in Insyde InsydeH2O with kernel 5.2...","CVE-2023-22616, CVE-2023-22616 vulnerability, CVE-2023-22616 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, insyde security, insydeh2o vulnerability","\u002Fwhat-is\u002Fcve-2023-22616",{"@context":82,"@type":83,"headline":77,"description":78,"datePublished":10,"dateModified":11,"author":84,"publisher":88,"about":92,"mainEntityOfPage":96,"articleSection":99,"keywords":100},"https:\u002F\u002Fschema.org","TechArticle",{"@type":85,"name":86,"url":87},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":85,"name":86,"url":87,"logo":89},{"@type":90,"url":91},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":93,"name":6,"description":94,"additionalType":95},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":97,"@id":98},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2023-22616","Cybersecurity","CVE-2023-22616, CVE-2023-22616 vulnerability, CVE-2023-22616 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[102],{"Operator":26,"Negate":26,"Nodes":103},[104],{"Operator":105,"Negate":26,"CPEMatch":106},"OR",[107],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":108,"VersionStartExcluding":26,"VersionStartIncluding":109,"VersionEndExcluding":26,"VersionEndIncluding":110},"65CB2167-2D7C-4C37-BABB-139525DAD682","5.2","5.5",[],[],{"lastModified":11,"cacheTime":114,"version":115},1793229525630,"2.0",{"score":117,"band":118,"action":119,"scoredAt":120},46,"Medium","Plan remediation","2026-10-28T06:57:11.684486+00:00"]