CVEvulnerability

CVE-2021-43613

6.5 MEDIUM Published 2026-09-03 Modified 2026-09-03 Official page ↗
Status
Undergoing Analysis
Published
2026-09-03
Last modified
2026-09-03
Assigner
8338d8cb-57f7-4252-abc0-96fd13e98d21
CVSS 3.1 (8338d8cb-57f7-4252-abc0-96fd13e98d21)
6.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
Weaknesses
CWE-732

Description

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

Related

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References