CVE-2023-31041: Insyde INSYDEH2O

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure.

Affected products

• Insyde INSYDEH2O: version 5.0 only; version 5.1 only; version 5.2 only; version 5.3 only; version 5.4 only; version 5.5 only

Published 2023-08-14. Last modified 2026-06-17.