CVE-2021-41837

HighCVSS 8.2/10Last modified Aug 11, 2026

Description

An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

VendorProductVersions
n/an/an/a
SiemensRUGGEDCOM APE1808 - BIOS< V1.0.202N
SiemensSIMATIC Field PG M5< V22.01.10
SiemensSIMATIC Field PG M6< V26.01.13
SiemensSIMATIC IPC127E< V27.01.09
SiemensSIMATIC IPC227G< V28.01.04
SiemensSIMATIC IPC277G< V28.01.04
SiemensSIMATIC IPC277G PRO< V28.01.04
SiemensSIMATIC IPC327G< V28.01.04
SiemensSIMATIC IPC377G< V28.01.04
SiemensSIMATIC IPC427E< V21.01.17
SiemensSIMATIC IPC477E< V21.01.17
SiemensSIMATIC IPC477E PRO< V21.01.17
SiemensSIMATIC IPC627E< V25.02.12
SiemensSIMATIC IPC647E< V25.02.12
SiemensSIMATIC IPC677E< V25.02.12
SiemensSIMATIC IPC847E< V25.02.12
SiemensSIMATIC ITP1000< V23.01.10
SiemensSIPLUS IPC427E< V21.01.17

References

Timeline

Published
Feb 3, 2022
Last modified
Aug 11, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-418388.2An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker tCVE-2021-418398.2An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference thatCVE-2021-41847.5Infinite loop in the BitTorrent DHT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafteCVE-2021-418408.2An issue was discovered in NvmExpressDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker CVE-2021-418418.2An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to CVE-2021-418429.8An issue was discovered in AtaLegacySmm in the kernel 5.0 before 05.08.46, 5.1 before 05.16.46, 5.2 before 05.26.46, 5.3 before 05.35.46, 5.CVE-2021-418436.5An authenticated SQL injection issue in the calendar search function of OpenEMR 6.0.0 before patch 3 allows an attacker to read data from alCVE-2021-418449.8Crocoblock JetEngine before 2.9.1 does not properly validate and sanitize form data.CVE-2021-418456.5A SQL injection issue was discovered in ThycoticCentrify Secret Server before 11.0.000007. The only affected versions are 10.9.000032 througCVE-2021-418478.8An issue was discovered in 3xLogic Infinias Access Control through 6.7.10708.0, affecting physical security. Users with login credentials asCVE-2021-418487.8An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It mishandles software updates such that local third-party apps can proviCVE-2021-418495.5An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following Personally Identifiable Information (PII) in plain