[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKVDd4W6kaoaaZocodtmJRB-lOVf6kTkwMjmHXajCviw":3,"g5a-risk:CVE-2022-35897":109},{"success":4,"data":5,"meta":106},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":57,"weaknesses":58,"weaknessesCount":43,"isActivelyExploited":67,"cisaInfo":27,"otxData":27,"relatedBlogPosts":68,"seoMetadata":69,"configurations":94,"relatedVendorCves":104,"notableEvents":105},"CVE-2022-35897","What is CVE-2022-35897?","An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. If the attacker modifies specific UEFI variables, it can cause a stack overflow, leading to arbitrary code execution. The specific variables are normally locked (read-only) at the OS level and therefore an attack would require direct SPI modification. If an attacker can change the values of at least two variables out of three (SecureBootEnforce, SecureBoot, RestoreBootSettings), it is possible to execute arbitrary code.","An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. If the attacke...","2022-11-21T17:15:25.28","2025-04-30T16:15:21.733",6.8,"CVSS:3.1\u002FAV:P\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","PHYSICAL","LOW","NONE","UNCHANGED","HIGH","MEDIUM",null,0.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":25,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00381,[34,34,34,34,34,34,34],"Medium",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"insyde","kernel","*","cpe:2.3:o:insyde:kernel:*:*:*:*:*:*:*:*",1,[45,50,53,55],{"url":46,"source":47,"tags":48},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge","Insyde",[49],"Vendor Advisory",{"url":51,"source":47,"tags":52},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge\u002FSA-2022041",[49],{"url":46,"source":47,"tags":54},[49],{"url":51,"source":47,"tags":56},[49],4,[59],{"id":60,"name":61,"description":62,"extendedDescription":63,"status":64,"abstraction":65,"structure":66},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",false,[],{"title":70,"metaDescription":71,"keywords":72,"canonicalUrl":73,"structuredData":74},"What is CVE-2022-35897? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-35897, a medium severity cyber security vulnerability from 2022. An stack buffer overflow vulnerability leads to arbitrary...","CVE-2022-35897, CVE-2022-35897 vulnerability, CVE-2022-35897 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, insyde security, kernel vulnerability","\u002Fwhat-is\u002Fcve-2022-35897",{"@context":75,"@type":76,"headline":70,"description":71,"datePublished":10,"dateModified":11,"author":77,"publisher":81,"about":85,"mainEntityOfPage":89,"articleSection":92,"keywords":93},"https:\u002F\u002Fschema.org","TechArticle",{"@type":78,"name":79,"url":80},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":78,"name":79,"url":80,"logo":82},{"@type":83,"url":84},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":86,"name":6,"description":87,"additionalType":88},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":90,"@id":91},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-35897","Cybersecurity","CVE-2022-35897, CVE-2022-35897 vulnerability, CVE-2022-35897 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[95],{"Operator":27,"Negate":27,"Nodes":96},[97],{"Operator":98,"Negate":27,"CPEMatch":99},"OR",[100],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":101,"VersionStartExcluding":27,"VersionStartIncluding":102,"VersionEndExcluding":27,"VersionEndIncluding":103},"DC5100FC-51F0-48D6-A4F0-782F1281DBF3","5.0","5.5",[],[],{"lastModified":11,"cacheTime":107,"version":108},1792260290668,"2.0",{"score":110,"band":111,"action":112,"scoredAt":113},25,"Low","Monitor","2026-10-16T06:56:20.007728+00:00"]