Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-52548

Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRAM memory and, in turn, lead to code execution in SMM

Published

2024-05-28T07:15:09.753

Last Modified

2025-01-17T18:31:57.740

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses

Type: Secondary
CWE-119
Type: Primary
CWE-787

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	huawei	curiem-wfg9b_firmware	ota-curiem-b-bios-2.28	Yes
Hardware	huawei	curiem-wfg9b	-	No

References

https://www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cn Vendor Advisory ([email protected])
https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-en Vendor Advisory ([email protected])
https://www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cn Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-en Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)