[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fIMuv7kZPJQfnR2cYgdw5jRbCjybFBQXizqqmOJfWV0U":3,"g5a-risk:CVE-2022-35895":155},{"success":4,"data":5,"meta":152},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":28,"weaknesses":64,"weaknessesCount":42,"isActivelyExploited":73,"cisaInfo":26,"otxData":26,"relatedBlogPosts":74,"seoMetadata":75,"configurations":100,"relatedVendorCves":150,"notableEvents":151},"CVE-2022-35895","What is CVE-2022-35895?","An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a software SMI routine, leading to memory corruption of arbitrary addresses including SMRAM, and possible arbitrary code execution.","An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a softw...","2022-09-21T21:15:09.15","2025-05-05T17:18:17.343",8.2,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","HIGH","NONE","CHANGED",null,1.5,6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00378,[33,33,33,33,33,33,33],"High",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"insyde","insydeh2o","*","cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",1,[44,50,55,58,60,62],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fbinarly.io\u002Fadvisories\u002FBRLY-2022-024\u002Findex.html","Binarly",[48,49],"Exploit","Third Party Advisory",{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge","Insyde",[54],"Vendor Advisory",{"url":56,"source":52,"tags":57},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge\u002FSA-2022033",[54],{"url":45,"source":46,"tags":59},[48,49],{"url":51,"source":52,"tags":61},[54],{"url":56,"source":52,"tags":63},[54],[65],{"id":66,"name":67,"description":68,"extendedDescription":69,"status":70,"abstraction":71,"structure":72},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":76,"metaDescription":77,"keywords":78,"canonicalUrl":79,"structuredData":80},"What is CVE-2022-35895? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-35895, a high severity cyber security vulnerability from 2022. An issue was discovered in Insyde InsydeH2O with kernel 5.0...","CVE-2022-35895, CVE-2022-35895 vulnerability, CVE-2022-35895 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, insyde security, insydeh2o vulnerability","\u002Fwhat-is\u002Fcve-2022-35895",{"@context":81,"@type":82,"headline":76,"description":77,"datePublished":10,"dateModified":11,"author":83,"publisher":87,"about":91,"mainEntityOfPage":95,"articleSection":98,"keywords":99},"https:\u002F\u002Fschema.org","TechArticle",{"@type":84,"name":85,"url":86},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":84,"name":85,"url":86,"logo":88},{"@type":89,"url":90},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":92,"name":6,"description":93,"additionalType":94},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":96,"@id":97},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-35895","Cybersecurity","CVE-2022-35895, CVE-2022-35895 vulnerability, CVE-2022-35895 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[101,110,118,126,134,142],{"Operator":26,"Negate":26,"Nodes":102},[103],{"Operator":104,"Negate":26,"CPEMatch":105},"OR",[106],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":108,"VersionEndExcluding":109,"VersionEndIncluding":26},"2E2D2426-1E28-46F4-A04E-A83A3DBD01AC","5.0","05.09.37",{"Operator":26,"Negate":26,"Nodes":111},[112],{"Operator":104,"Negate":26,"CPEMatch":113},[114],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":116,"VersionEndExcluding":117,"VersionEndIncluding":26},"E9D00C0C-C730-47ED-B561-1433BB640780","5.1","05.17.37",{"Operator":26,"Negate":26,"Nodes":119},[120],{"Operator":104,"Negate":26,"CPEMatch":121},[122],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":124,"VersionEndExcluding":125,"VersionEndIncluding":26},"E8D0A7D7-5775-4B3A-B998-37EF7FB4B8D6","5.2","05.27.29",{"Operator":26,"Negate":26,"Nodes":127},[128],{"Operator":104,"Negate":26,"CPEMatch":129},[130],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":131,"VersionStartExcluding":26,"VersionStartIncluding":132,"VersionEndExcluding":133,"VersionEndIncluding":26},"D5FECD45-7167-4312-B2ED-36D309A8C5EC","5.3","05.36.29",{"Operator":26,"Negate":26,"Nodes":135},[136],{"Operator":104,"Negate":26,"CPEMatch":137},[138],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":140,"VersionEndExcluding":141,"VersionEndIncluding":26},"98809678-EA92-4A53-82B7-34A4504EF1C7","5.4","05.44.29",{"Operator":26,"Negate":26,"Nodes":143},[144],{"Operator":104,"Negate":26,"CPEMatch":145},[146],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":147,"VersionStartExcluding":26,"VersionStartIncluding":148,"VersionEndExcluding":149,"VersionEndIncluding":26},"53B89A38-CB9D-44BE-8693-80957205AF31","5.5","05.52.29",[],[],{"lastModified":11,"cacheTime":153,"version":154},1792260088090,"2.0",{"score":156,"band":157,"action":158,"scoredAt":159},49,"Medium","Plan remediation","2026-10-16T06:55:47.99158+00:00"]