A vulnerability in Insyde H2O UEFI application allows for digital certificate injection via NVRAM

ronjor · Jun 10, 2025

Vulnerability Note VU#211341

Original Release Date: 2025-06-10 | Last Revised: 2025-06-10
Click to expand...

Overview
A vulnerability in an Insyde H2O UEFI firmware application allows digital certificate injection through an unprotected NVRAM variable.
Click to expand...

This issue arises from the unsafe use of an NVRAM variable, which is used as trusted storage for a digital certificate in the trust validation chain. An attacker can store their own certificate in this variable and subsequently run arbitrary firmware (signed by the injected certificate) during the early boot process within the UEFI environment.
Click to expand...

Solution
Due to the supply-chain redistribution of this firmware application across multiple Original Device Manufacturers (ODMs) and Original Equipment Manufacturers (OEMs), the vulnerability may be present in multiple PC models. Please check the Vendor Information section for details.
Click to expand...

Log in or Sign up

A vulnerability in Insyde H2O UEFI application allows for digital certificate injection via NVRAM

ronjor Global Moderator

Log in or Sign up

A vulnerability in Insyde H2O UEFI application allows for digital certificate injection via NVRAM

ronjor Global Moderator

Useful Searches