EUVD-2026-62294
GHSA-4fhc-754f-qxmh
Severity by source
AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Physical access and high complexity required; impact is credential disclosure only - no direct integrity or availability impact from the retrieval itself.
Primary rating from Vendor (8338d8cb-57f7-4252-abc0-96fd13e98d21).
CVSS VectorVendor: 8338d8cb-57f7-4252-abc0-96fd13e98d21
CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
3DescriptionCVE.org
On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables.
AnalysisAI
HDD Password credential exposure on ARM-platform Insyde UEFI firmware allows a low-privileged physical attacker to retrieve the HDD Password directly from UEFI variables due to an architectural design flaw. The vulnerability is classified under CWE-522 (Insufficiently Protected Credentials), meaning the password is stored or accessible in UEFI NVRAM without adequate protection, enabling its recovery by an attacker with physical access. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires physical presence at the target device (AV:P - no remote exploitation is possible). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) indicates physical access is required (AV:P), reducing opportunistic or remote exploitation to zero. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker with physical access to an ARM-based device running vulnerable Insyde firmware (e.g., a stolen or temporarily unattended laptop) boots into the UEFI shell or a live OS environment with low-privileged access, reads the UEFI NVRAM variables containing the inadequately protected HDD Password, and recovers the password in cleartext or weakly encoded form. The attacker then uses the recovered password to unlock the HDD in another system or bypass the password prompt on the original device, gaining access to encrypted storage. … |
| Remediation | The primary remediation is to apply the firmware update released by Insyde Software as documented in security advisory SA-2026005, available at https://www.insyde.com/security-pledge/sa-2026005/. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-522 – Insufficiently Protected Credentials
View allSame technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today