Security features bypass in InsydeH2O Kernel - CVE-2023-30633

Vulnerability identifier: #VU81907

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-30633

CWE-ID: CWE-254

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows an attacker to bypass implemented security restrictions.

The vulnerability exists within the TrEEConfigDriver driver that can report false TPM PCR values. An attacker with physical access to device can write arbitrary values into Platform Configuration Register (PCR) banks and mask malicious activity on the device.

InsydeH2O Kernel
Dell G15 5535
Inspiron 15 3535
Vostro 15 3535
Vostro 14 3435
Inspiron 14 5435
Vostro 16 5635
Inspiron 16 7635 2-in-1
Inspiron 16 5635
Inspiron 14 7435 2-in-1
Alienware m18
Alienware m16 R1 AMD
Dell G15 5525
Alienware m17 R5 AMD
Alienware m15 R7 AMD
Inspiron 14 7425 2-in-1
Inspiron 5425
Vostro 5625
Inspiron 15 3525
Vostro 3425
Vostro 3525
Inspiron 5405
Inspiron 5505
Dell G15 5515
Inspiron 7405 2-in-1
Inspiron 3585
Inspiron 5415
Inspiron 3785
Alienware m15 Ryzen Edition R5
Inspiron 3515
Vostro 3405
Inspiron 3505
Vostro 3515
Dell G5 5505
Inspiron 5515
Inspiron 7415 2-in-1
Vostro 5415
Vostro 5515

Install updates from vendor's website.

InsydeH2O Kernel - addressed in versions 5.3 05.37.17, 5.4 05.45.17, 5.5 05.53.17, 5.6 05.60.17
Dell G15 5535 - update to 1.3.0
Inspiron 15 3535 - update to 1.6.0
Vostro 15 3535 - update to 1.6.0
Vostro 14 3435 - update to 1.6.0
Inspiron 14 5435 - update to 1.6.1
Vostro 16 5635 - update to 1.6.1
Inspiron 16 7635 2-in-1 - update to 1.6.1
Inspiron 16 5635 - update to 1.6.1
Inspiron 14 7435 2-in-1 - update to 1.6.1
Alienware m18 - update to 1.7.0
Alienware m16 R1 AMD - update to 1.7.0
Dell G15 5525 - update to 1.11.1
Alienware m17 R5 AMD - update to 1.11.1
Alienware m15 R7 AMD - update to 1.11.1
Inspiron 14 7425 2-in-1 - update to 1.12.1
Inspiron 5425 - update to 1.12.1
Vostro 5625 - update to 1.12.1
Inspiron 15 3525 - update to 1.13.0
Vostro 3425 - update to 1.13.0
Vostro 3525 - update to 1.13.0
Inspiron 5405 - update to 1.13.2
Inspiron 5505 - update to 1.13.2
Dell G15 5515 - update to 1.14.0
Inspiron 7405 2-in-1 - update to 1.14.2
Inspiron 3585 - update to 1.15.0
Inspiron 5415 - update to 1.15.0
Inspiron 3785 - update to 1.15.0
Alienware m15 Ryzen Edition R5 - update to 1.15.0
Inspiron 3515 - update to 1.15.1
Vostro 3405 - update to 1.15.1
Inspiron 3505 - update to 1.15.1
Vostro 3515 - update to 1.15.1
Dell G5 5505 - update to 1.17.2
Inspiron 5515 - update to 1.18.1
Inspiron 7415 2-in-1 - update to 1.18.1
Vostro 5415 - update to 1.18.1
Vostro 5515 - update to 1.18.1

• https://www.insyde.com/security-pledge/SA-2023045

• Security restrictions bypass in Insyde kernel
• Dell Client Platform update for INSYDE UEFI BIOS