[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuZamq9CwF66vxfof_AvNQKYfUrpnVD_HqvDakbR2R9E":3,"g5a-ex:siemens\u002Fsimatic_ipc277g_firmware@*":85,"g5a-family:siemens\u002Fsimatic_ipc277g_firmware":87},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":62,"seoMetadata":63,"meta":82},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"siemens","simatic_ipc277g_firmware",0,9,"2022-02-03",[],"Simatic Ipc277g Firmware by Siemens is a technology product and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,24,30,34,39,44,50,54,58],{"cveId":17,"description":18,"publishedDate":11,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":23},"CVE-2021-42059","An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.08.41, Kernel 5.1 before 05.16.41, Kernel 5.2 before 05.26.41, Kernel 5.3 before 05.35.41, and Kernel 5.4 before 05.42.20. A stack-based buffer overflow leads toarbitrary code execution in UEFI DisplayTypeDxe DXE driver.",6.7,"v3.1","Medium",false,0.00346,{"cveId":25,"description":26,"publishedDate":11,"cvssScore":27,"cvssVersion":20,"severity":28,"isKev":22,"epssScore":29},"CVE-2021-33627","An issue was discovered in Insyde InsydeH2O Kernel 5.0 before 05.09.11, 5.1 before 05.17.11, 5.2 before 05.27.11, 5.3 before 05.36.11, 5.4 before 05.44.11, and 5.5 before 05.52.11 affecting FwBlockServiceSmm. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.",8.2,"High",0.00328,{"cveId":31,"description":32,"publishedDate":11,"cvssScore":27,"cvssVersion":20,"severity":28,"isKev":22,"epssScore":33},"CVE-2021-42554","An issue was discovered in Insyde InsydeH2O with Kernel 5.0 before 05.08.42, Kernel 5.1 before 05.16.42, Kernel 5.2 before 05.26.42, Kernel 5.3 before 05.35.42, Kernel 5.4 before 05.42.51, and Kernel 5.5 before 05.50.51. An SMM memory corruption vulnerability in FvbServicesRuntimeDxe allows a possible attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",0.00327,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":19,"cvssVersion":20,"severity":21,"isKev":22,"epssScore":38},"CVE-2020-27339","In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowing callers to corrupt either the firmware or the OS memory. The fixed versions for this issue in the AhciBusDxe, IdeBusDxe, NvmExpressDxe, SdHostDriverDxe, and SdMmcDeviceDxe drivers are 05.16.25, 05.26.25, 05.35.25, 05.43.25, and 05.51.25 (for Kernel 5.1 through 5.5).","2021-06-16",0.00317,{"cveId":40,"description":41,"publishedDate":11,"cvssScore":42,"cvssVersion":20,"severity":28,"isKev":22,"epssScore":43},"CVE-2021-33625","An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. Software SMI services that use the Communicate() function of the EFI_SMM_COMMUNICATION_PROTOCOL do not check whether the address of the buffer is valid, which allows use of SMRAM, MMIO, or OS kernel addresses.",7.5,0.00315,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":20,"severity":28,"isKev":22,"epssScore":49},"CVE-2021-33626","A vulnerability exists in SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer(QWORD values for CommBuffer). This can be used by an attacker to corrupt data in SMRAM memory and even lead to arbitrary code execution.","2021-10-01",7.8,0.00308,{"cveId":51,"description":52,"publishedDate":11,"cvssScore":27,"cvssVersion":20,"severity":28,"isKev":22,"epssScore":53},"CVE-2021-41838","An issue was discovered in SdHostDriver in the kernel 5.0 through 5.5 in Insyde InsydeH2O. There is an SMM callout that allows an attacker to access the System Management Mode and execute arbitrary code. This occurs because of a Numeric Range Comparison Without a Minimum Check.",0.00303,{"cveId":55,"description":56,"publishedDate":11,"cvssScore":42,"cvssVersion":20,"severity":28,"isKev":22,"epssScore":57},"CVE-2020-5953","A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).",0.00284,{"cveId":59,"description":60,"publishedDate":11,"cvssScore":27,"cvssVersion":20,"severity":28,"isKev":22,"epssScore":61},"CVE-2021-41837","An issue was discovered in AhciBusDxe in the kernel 5.0 through 5.5 in Insyde InsydeH2O. Because of an Untrusted Pointer Dereference that causes SMM memory corruption, an attacker may be able to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.",0.00281,[],{"title":64,"metaDescription":65,"keywords":66,"structuredData":67},"Simatic Ipc277g Firmware by Siemens - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Simatic Ipc277g Firmware by Siemens with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Simatic Ipc277g Firmware vulnerabilities, Simatic Ipc277g Firmware security, Simatic Ipc277g Firmware CVE, Siemens Simatic Ipc277g Firmware, Simatic Ipc277g Firmware threat intelligence, Siemens security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":68,"@type":69,"name":70,"description":65,"url":71,"manufacturer":72,"applicationCategory":76,"softwareVersion":77,"mainEntity":78},"https:\u002F\u002Fschema.org","SoftwareApplication","Simatic Ipc277g Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsiemens\u002Fsimatic_ipc277g_firmware",{"@type":73,"name":74,"url":75},"Organization","Siemens","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsiemens","Security Software","Multiple versions",{"@type":79,"name":80,"description":81,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Simatic Ipc277g Firmware Security Vulnerabilities","Security vulnerabilities affecting Simatic Ipc277g Firmware by Siemens",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":83,"apiVersion":84},"2026-10-17T17:55:16.394Z","3.0",{"rows":86,"total":9,"capped":22,"failed":9},[],[]]