[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f__Ku8-KE4W9xZPxH1gmhSj-3mFSESfX8GAhz-V4IHDw":3,"g5a-risk:CVE-2022-35407":108},{"success":4,"data":5,"meta":105},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":56,"weaknesses":57,"weaknessesCount":42,"isActivelyExploited":66,"cisaInfo":26,"otxData":26,"relatedBlogPosts":67,"seoMetadata":68,"configurations":93,"relatedVendorCves":103,"notableEvents":104},"CVE-2022-35407","What is CVE-2022-35407?","An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver on Intel platforms. An attacker can change the values of certain UEFI variables. If the size of the second variable exceeds the size of the first, then the buffer will be overwritten. This issue affects the SetupUtility driver of InsydeH2O.","An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. A stack buffer overflow leads to arbitrary code execution in the SetupUtility driver...","2022-11-22T02:15:09.12","2025-04-29T16:15:23.8",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00244,[33,33,33,33,33,33,33],"High",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"insyde","kernel","*","cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*",1,[44,49,52,54],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge","Insyde",[48],"Vendor Advisory",{"url":50,"source":46,"tags":51},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge\u002FSA-2022040",[48],{"url":45,"source":46,"tags":53},[48],{"url":50,"source":46,"tags":55},[48],4,[58],{"id":59,"name":60,"description":61,"extendedDescription":62,"status":63,"abstraction":64,"structure":65},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":69,"metaDescription":70,"keywords":71,"canonicalUrl":72,"structuredData":73},"What is CVE-2022-35407? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-35407, a high severity cyber security vulnerability from 2022. An issue was discovered in Insyde InsydeH2O with kernel 5.0...","CVE-2022-35407, CVE-2022-35407 vulnerability, CVE-2022-35407 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, insyde security, kernel vulnerability","\u002Fwhat-is\u002Fcve-2022-35407",{"@context":74,"@type":75,"headline":69,"description":70,"datePublished":10,"dateModified":11,"author":76,"publisher":80,"about":84,"mainEntityOfPage":88,"articleSection":91,"keywords":92},"https:\u002F\u002Fschema.org","TechArticle",{"@type":77,"name":78,"url":79},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":77,"name":78,"url":79,"logo":81},{"@type":82,"url":83},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":85,"name":6,"description":86,"additionalType":87},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":89,"@id":90},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-35407","Cybersecurity","CVE-2022-35407, CVE-2022-35407 vulnerability, CVE-2022-35407 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[94],{"Operator":26,"Negate":26,"Nodes":95},[96],{"Operator":97,"Negate":26,"CPEMatch":98},"OR",[99],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":100,"VersionStartExcluding":26,"VersionStartIncluding":101,"VersionEndExcluding":26,"VersionEndIncluding":102},"DC5100FC-51F0-48D6-A4F0-782F1281DBF3","5.0","5.5",[],[],{"lastModified":11,"cacheTime":106,"version":107},1792260290363,"2.0",{"score":109,"band":110,"action":111,"scoredAt":112},46,"Medium","Plan remediation","2026-10-16T06:56:20.021619+00:00"]