← CVE Intelligence

CVE-2025-4424

SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler PUBLISHED

Description (CNA)

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.  https://support.lenovo.com/us/en/product_security/home

Affected (CNA)

Vendor / productVersions
Insyde Software / InsydeH2Oaffected Feature developed for Lenovo before L05.05.40.011803.172079

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.