[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fc5rxIejgAiCrHD5o7yypWCESwesFv2rKe9yEMLCx8mw":3,"g5a-risk:CVE-2022-36338":110},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":42,"references":43,"referencesCount":28,"weaknesses":64,"weaknessesCount":42,"isActivelyExploited":68,"cisaInfo":26,"otxData":26,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":105,"notableEvents":106},"CVE-2022-36338","What is CVE-2022-36338?","An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver FwBlockServiceSmm, creating SMM, leads to arbitrary code execution. An attacker can replace the pointer to the UEFI boot service GetVariable with a pointer to malware, and then generate a software SMI.","An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver FwBlockServiceSmm, creating SMM, lead...","2022-09-23T18:15:10.803","2025-05-05T17:18:17.843",8.2,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","HIGH","NONE","CHANGED",null,1.5,6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00463,[33,33,33,33,33,33,33],"High",[37],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"insyde","insydeh2o","*","cpe:2.3:a:insyde:insydeh2o:*:*:*:*:*:*:*:*",1,[44,50,55,58,60,62],{"url":45,"source":46,"tags":47},"https:\u002F\u002Fbinarly.io\u002Fadvisories\u002FBRLY-2022-017\u002Findex.html","Binarly",[48,49],"Exploit","Third Party Advisory",{"url":51,"source":52,"tags":53},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge","Insyde",[54],"Vendor Advisory",{"url":56,"source":52,"tags":57},"https:\u002F\u002Fwww.insyde.com\u002Fsecurity-pledge\u002FSA-2022029",[54],{"url":45,"source":46,"tags":59},[48,49],{"url":51,"source":52,"tags":61},[54],{"url":56,"source":52,"tags":63},[54],[65],{"id":66,"name":66,"description":67},"Unknown","NVD-CWE-noinfo",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2022-36338? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-36338, a high severity cyber security vulnerability from 2022. An issue was discovered in Insyde InsydeH2O with kernel 5.0...","CVE-2022-36338, CVE-2022-36338 vulnerability, CVE-2022-36338 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, insyde security, insydeh2o vulnerability","\u002Fwhat-is\u002Fcve-2022-36338",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-36338","Cybersecurity","CVE-2022-36338, CVE-2022-36338 vulnerability, CVE-2022-36338 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":26,"Negate":26,"Nodes":97},[98],{"Operator":99,"Negate":26,"CPEMatch":100},"OR",[101],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":102,"VersionStartExcluding":26,"VersionStartIncluding":103,"VersionEndExcluding":26,"VersionEndIncluding":104},"D301572D-C5C6-41F1-A5D2-41F07E0FC15D","5.0","5.5",[],[],{"lastModified":11,"cacheTime":108,"version":109},1792260085934,"2.0",{"score":111,"band":112,"action":113,"scoredAt":114},49,"Medium","Plan remediation","2026-10-16T06:55:48.045313+00:00"]