Vulnerability CVE-2023-28468
Published: 2023-08-03

Description:
An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntimeDxe SMM module exposes an SMI handler that allows an attacker to interact with the SPI flash at run-time from the OS.

 References:
https://www.insyde.com/security-pledge/SA-2023039
https://www.insyde.com/security-pledge
Copyright 2026, cxsecurity.com

 

Back to Top