https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:41:21.922896+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2020-5953 CVE-2020-5953 2026-10-06T12:41:21.940630+00:00

Affected: Siemens SIMATIC Field PG M5, Siemens SIMATIC Field PG M6, Siemens SIMATIC IPC127E, Siemens SIMATIC IPC227G, Siemens SIMATIC IPC277G, Siemens SIMATIC IPC277G PRO, Siemens SIMATIC IPC327G, Siemens SIMATIC IPC377G, Siemens SIMATIC IPC427E, Siemens SIMATIC IPC477E and 7 more

A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).