CVE-2021-45969

HighCVSS 8.2/10Last modified Aug 11, 2026

Description

An issue was discovered in AhciBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (the CommBuffer+8 location).

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
Siemens	RUGGEDCOM APE1808 - BIOS	< V1.0.202N
Siemens	SIMATIC Field PG M5	< V22.01.10
Siemens	SIMATIC Field PG M6	< V26.01.13
Siemens	SIMATIC IPC127E	< V27.01.09
Siemens	SIMATIC IPC227G	< V28.01.04
Siemens	SIMATIC IPC277G	< V28.01.04
Siemens	SIMATIC IPC277G PRO	< V28.01.04
Siemens	SIMATIC IPC327G	< V28.01.04
Siemens	SIMATIC IPC377G	< V28.01.04
Siemens	SIMATIC IPC427E	< V21.01.17
Siemens	SIMATIC IPC477E	< V21.01.17
Siemens	SIMATIC IPC477E PRO	< V21.01.17
Siemens	SIMATIC IPC627E	< V25.02.12
Siemens	SIMATIC IPC647E	< V25.02.12
Siemens	SIMATIC IPC677E	< V25.02.12
Siemens	SIMATIC IPC847E	< V25.02.12
Siemens	SIMATIC ITP1000	< V23.01.10
Siemens	SIPLUS IPC427E	< V21.01.17

References

https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
https://security.netapp.com/advisory/ntap-20220216-0004/Third Party Advisory
https://www.insyde.com/security-pledgeVendor Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdfThird Party Advisory
https://security.netapp.com/advisory/ntap-20220216-0004/Third Party Advisory
https://www.insyde.com/security-pledgeVendor Advisory
https://www.kb.cert.org/vuls/id/796611
https://cert-portal.siemens.com/productcert/html/ssa-306654.html

Timeline

Published: Jan 5, 2022
Last modified: Aug 11, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-459708.2An issue was discovered in IdeBusDxe in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 befo CVE-2021-459718.2An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 b CVE-2021-459727.1The giftrans function in giftrans 1.12.2 contains a stack-based buffer overflow because a value inside the input file determines the amount CVE-2021-459757.8In ListCheck.exe in Acer Care Center 4.x before 4.00.3038, a vulnerability in the loading mechanism of Windows DLLs could allow a local atta CVE-2021-459779.8JetBrains IntelliJ IDEA 2021.3.1 Preview, IntelliJ IDEA 2021.3.1 RC, PyCharm Professional 2021.3.1 RC, GoLand 2021.3.1, PhpStorm 2021.3.1 Pr CVE-2021-459787.8Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via xfa.host.gotoURL in the XFA API.CVE-2021-459797.8Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via app.launchURL in the JavaScript AP CVE-2021-459807.8Foxit PDF Reader and PDF Editor before 11.1 on macOS allow remote attackers to execute arbitrary code via getURL in the JavaScript API.CVE-2021-459819.8NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.CVE-2021-459828.8NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.CVE-2021-459839.8NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.CVE-2021-459857.5In Lua 5.4.3, an erroneous finalizer called during a tail call leads to a heap-based buffer over-read.