CVE-2022-24030

CVSS 3.1: 7.5 high
EPSS: <1%p23
Published: Feb 3, 2022 · Feb 3, 2022
Modified: Aug 11, 2026

Analyze CVE-2022-24030 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 through 5.5. An SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

Vendors: insyde

Products: insydeh2o

Weakness: CWE-787

Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

1 story

Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits

The Hacker NewsJan 24, 12:47 UTC · Jan 24, 2025VulnerabilityCVE-2020-10713 CVE-2022-24030 CVE-2021-33627+52 · 1 read