CVE-2021-45971 json
An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4…
published 4y ago modified 2mo ago also EUVD-2021-32677
- cvss
- 8.2
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.3%
- EPSS 0.3% chance of exploitation in 30 days, percentile 21%
- public exploits
- 0
- none known
Summary
An issue was discovered in SdHostDriver in Insyde InsydeH2O with kernel 5.1 before 05.16.25, 5.2 before 05.26.25, 5.3 before 05.35.25, 5.4 before 05.43.25, and 5.5 before 05.51.25. A vulnerability exists in the SMM (System Management Mode) branch that registers a SWSMI handler that does not sufficiently check or validate the allocated buffer pointer (CommBufferData).
Patch / fix
- Siemens RUGGEDCOM APE1808 - BIOS V1.0.202N
- Siemens SIMATIC Field PG M5 V22.01.10
- Siemens SIMATIC Field PG M6 V26.01.13
- Siemens SIMATIC IPC127E V27.01.09
- Siemens SIMATIC IPC227G V28.01.04
- Siemens SIMATIC IPC277G V28.01.04
- Siemens SIMATIC IPC277G PRO V28.01.04
- Siemens SIMATIC IPC327G V28.01.04
- Siemens SIMATIC IPC377G V28.01.04
- Siemens SIMATIC IPC427E V21.01.17
- Siemens SIMATIC IPC477E V21.01.17
- Siemens SIMATIC IPC477E PRO V21.01.17
- Siemens SIMATIC IPC627E V25.02.12
- Siemens SIMATIC IPC647E V25.02.12
- Siemens SIMATIC IPC677E V25.02.12
- Siemens SIMATIC IPC847E V25.02.12
- Siemens SIMATIC ITP1000 V23.01.10
- Siemens SIPLUS IPC427E V21.01.17
Is CVE-2021-45971 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerExploit prediction
0.29% chance of exploitation in the next 30 days, higher than 21% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 3.1 | 8.2 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
| NVD | 2.0 | 7.2 | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Affected products
- Siemens RUGGEDCOM APE1808 - BIOS
- Siemens SIMATIC Field PG M5
- Siemens SIMATIC Field PG M6
- Siemens SIMATIC IPC127E
- Siemens SIMATIC IPC227G
- Siemens SIMATIC IPC277G
- Siemens SIMATIC IPC277G PRO
- Siemens SIMATIC IPC327G
- Siemens SIMATIC IPC377G
- Siemens SIMATIC IPC427E
- Siemens SIMATIC IPC477E
- Siemens SIMATIC IPC477E PRO
- Siemens SIMATIC IPC627E
- Siemens SIMATIC IPC647E
- Siemens SIMATIC IPC677E
- Siemens SIMATIC IPC847E
- Siemens SIMATIC ITP1000
- Siemens SIPLUS IPC427E
Classification
- Weakness
-
- CWE-787 Out-of-bounds Write
References
-
insyde.com
/security-pledge
vendor-advisory
-
security.netapp.com
/advisory/ntap-20220216-0004/
third-party-advisory
-
cert-portal.siemens.com
/productcert/pdf/ssa-306654.pdf
third-party-advisory
- kb.cert.org /vuls/id/796611
- cert-portal.siemens.com /productcert/html/ssa-306654.html
Sources
- CVE List CVE-2021-45971
- NVD CVE-2021-45971
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.