A vulnerability was found in Insyde InsydeH2O up to 05.70.49. It has been rated as problematic. Affected by this issue is some unknown functionality of the component VariableRuntimeDxe Driver. The manipulation leads to denial of service.
This vulnerability is handled as CVE-2024-52880. Access to the local network is required for this attack. There is no exploit available.
It is recommended to upgrade the affected component.