CVE-2022-29277
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-29277
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.0048 Whitley: 05.42.23.0066 Cedar Island: 05.42.11.0021 Eagle Stream: 05.44.25.0052 Greenlow/Greenlow-R(skylake/kabylake): Trunk Mehlow/Mehlow-R (CoffeeLake-S): Trunk Tatlow (RKL-S): Trunk Denverton: 05.10.12.0042 Snow Ridge: Trunk Graneville DE: 05.05.15.0038 Grangeville DE NS: 05.27.26.0023 Bakerville: 05.21.51.0026 Idaville: 05.44.27.0030 Whiskey Lake: Trunk Comet Lake-S: Trunk Tiger Lake H/UP3: 05.43.12.0052 Alder Lake: 05.44.23.0047 Gemini Lake: Not Affected Apollo Lake: Not Affected Elkhart Lake: 05.44.30.0018 AMD ROME: trunk MILAN: 05.36.10.0017 GENOA: 05.52.25.0006 Snowy Owl: Trunk R1000: 05.32.50.0018 R2000: 05.44.30.0005 V2000: Trunk V3000: 05.44.30.0007 Ryzen 5000: 05.44.30.0004 Embedded ROME: Trunk Embedded MILAN: Trunk Hygon Hygon #1/#2: 05.36.26.0016 Hygon #3: 05.44.26.0007 https://www.insyde.com/security-pledge/SA-2022060
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Insyde InsydeH2O 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Insyde InsydeH2O是中国台湾系微（Insyde）公司的一个 C 语言源，它实现了新技术“EFI/UEFI”规范，旨在取代传统的 BIOS（基本输入/输出系统）。 Insyde InsydeH2O 存在安全漏洞，该漏洞源于FwBlockServiceSmm驱动程序中不正确的指针检查，可能允许任意RAM修改，在审查FwBlockServiceSmm驱动程序期间，SpiAccessLib的某些实例可能会被欺骗，将0xff写入任意系统和SMRAM地址。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2022-29277
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-29277
请登录查看更多情报信息。
Vendor · 1
Same Patch Batch · n/a · 2022-11-15 · 41 CVEs total
| CVE-2022-42128 | Liferay Portal和Liferay DXP 安全漏洞 | |
| CVE-2022-42119 | Liferay Portal和Liferay DXP 跨站脚本漏洞 | |
| CVE-2022-42120 | Liferay Portal和Liferay DXP SQL注入漏洞 | |
| CVE-2022-42121 | Liferay Portal和Liferay DXP SQL注入漏洞 | |
| CVE-2022-42122 | Liferay Portal和Liferay DXP SQL注入漏洞 | |
| CVE-2022-42123 | Liferay Portal和Liferay DXP 路径遍历漏洞 | |
| CVE-2022-42124 | Liferay Portal和Liferay DXP 安全漏洞 | |
| CVE-2022-42125 | Liferay Portal和Liferay DXP 路径遍历漏洞 | |
| CVE-2022-42126 | Liferay Portal和Liferay DXP 安全漏洞 | |
| CVE-2022-42127 | Liferay Portal和Liferay DXP 安全漏洞 | |
| CVE-2022-42118 | Liferay Portal和Liferay DXP 跨站脚本漏洞 | |
| CVE-2022-42129 | Liferay Portal和Liferay DXP 安全漏洞 | |
| CVE-2022-42130 | Liferay Portal和Liferay DXP 安全漏洞 | |
| CVE-2022-42131 | Liferay Portal和Liferay DXP 信任管理问题漏洞 | |
| CVE-2022-42132 | Liferay Portal和Liferay DXP 信息泄露漏洞 | |
| CVE-2022-42977 | Atlassian Confluence 路径遍历漏洞 | |
| CVE-2022-42978 | Atlassian Confluence 安全漏洞 | |
| CVE-2022-43071 | XPDF 缓冲区错误漏洞 | |
| CVE-2022-43265 | Canteen Management System 代码问题漏洞 | |
| CVE-2022-43279 | LimeSurvey SQL注入漏洞 |
Showing top 20 of 41 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2022-29277
No comments yet