CVE-2020-27339 — MEDIUM (6.7)

Q: How severe is CVE-2020-27339?

CVE-2020-27339 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2020-27339?

Check the references section above for vendor advisories and patch information. Affected products include: Insyde Insydeh2O, Siemens Ruggedcom Apr1808 Firmware, Siemens Ruggedcom Apr1808, Siemens Simatic Field Pg M5 Firmware, Siemens Simatic Field Pg M5.

Vulnerability Description

In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Insyde	Insydeh2O	>= 5.3, < 5.34.44
Siemens	Ruggedcom Apr1808 Firmware	-
Siemens	Ruggedcom Apr1808	-
Siemens	Simatic Field Pg M5 Firmware	-
Siemens	Simatic Field Pg M5	-
Siemens	Simatic Field Pg M6 Firmware	-
Siemens	Simatic Field Pg M6	-
Siemens	Simatic Ipc127E Firmware	-
Siemens	Simatic Ipc127E	-
Siemens	Simatic Ipc227G Firmware	-
Siemens	Simatic Ipc227G	-
Siemens	Simatic Ipc277G Firmware	-
Siemens	Simatic Ipc277G	-
Siemens	Simatic Ipc327G Firmware	-
Siemens	Simatic Ipc327G	-
Siemens	Simatic Ipc377G Firmware	-
Siemens	Simatic Ipc377G	-
Siemens	Simatic Ipc427E Firmware	-
Siemens	Simatic Ipc427E	-
Siemens	Simatic Ipc477E Firmware	-

Related Weaknesses (CWE)

CWE-20

References

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
https://security.netapp.com/advisory/ntap-20220216-0005/Third Party Advisory
https://www.insyde.com/security-pledge/SA-2021001Vendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
https://security.netapp.com/advisory/ntap-20220216-0005/Third Party Advisory
https://www.insyde.com/security-pledge/SA-2021001Vendor Advisory
https://www.kb.cert.org/vuls/id/796611

FAQ

What is CVE-2020-27339?

CVE-2020-27339 is a vulnerability with a CVSS score of 6.7 (MEDIUM). In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. Th...

How severe is CVE-2020-27339?

CVE-2020-27339 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-27339?

Check the references section above for vendor advisories and patch information. Affected products include: Insyde Insydeh2O, Siemens Ruggedcom Apr1808 Firmware, Siemens Ruggedcom Apr1808, Siemens Simatic Field Pg M5 Firmware, Siemens Simatic Field Pg M5.