A vulnerability was found in Insyde H2O up to 05.71.20. It has been rated as critical. This issue affects the function
Tcg2Smm. The manipulation leads to improper input validation.
The identification of this vulnerability is CVE-2025-4277. It is possible to launch the attack on the local host. There is no exploit available.
It is recommended to upgrade the affected component.
