CVE-2025-4424

SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler

CVSS 6 MEDIUMEPSS 0.2%CWE-20

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability. https://support.lenovo.com/us/en/product_security/home

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

Produtos afetados

Insyde Software · InsydeH2O

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://support.lenovo.com/us/en/product_security/home https://www.insyde.com/security-pledge/sa-2025007/