CVE-2021-43613 | CVSS: 6.5 | 严重级别: MEDIUM
An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege
参考链接:
• https://www.insyde.com/security-pledge/sa-2022027/
📌 数据来源: NVD 官方
⚠️ 合规声明: 本文内容仅用于网络安全合规学习、科研与授权测试用途。严禁用于任何未授权行为,违者自行承担全部法律责任。