I

Insyde

D
RISKY
13
Total CVEs
1
Crit / High
0
Medium
6%
Unpatched
0%
Patched
7.5
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
6%
Under Review
64%
Pending
31%
✓ 0 patched ✗ 2 unpatched ~ 23 under review ⏳ 11 pending score
▸ Intelligence by Audience
PoC Available
8 / 20 shown
CISA KEV (Exploited)
0
Top EPSS (Exploitation Probability)
CVE-2021-42060 0.35% exploitation probability
CVE-2021-43323 0.35% exploitation probability
CVE-2021-42554 0.33% exploitation probability
CVE-2021-33625 0.32% exploitation probability
CVE-2022-24030 0.30% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
13
Critical severity
0
Actively exploited (CISA)
0
Unpatched ratio
6%
Avg CVSS score
7.5
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
GOOD
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
UEFI Vulnerability in Insyde Allows Digital Certificate Injection Through NVRAM Variable - Cyber Press
Cyber Press 2025-06-11
Multiple Lenovo BIOS flaws allow hackers to stay undetected - Cybernews
Cybernews 2025-07-31
Eclypsium finds security issues in Palo Alto Networks NGFWs - TechTarget
TechTarget 2025-01-23
▸ Recent CVEs showing 20 of 36
CVE IDSeverityPatchEPSSDate
CVE-2024-55567 PoC 7.5 HIGH UNKNOWN / UNPATCHED 0.06% 2025-06-12
CVE-2024-52877 ? N/A UNKNOWN / UNPATCHED 0.29% 2025-05-15
CVE-2024-52880 ? N/A UNKNOWN / UNPATCHED 0.08% 2025-05-15
CVE-2024-52878 ? N/A UNKNOWN / UNPATCHED 0.29% 2025-05-15
CVE-2024-52879 ? N/A UNKNOWN / UNPATCHED 0.29% 2025-05-15
CVE-2024-49200 PoC ? N/A UNKNOWN / UNPATCHED 0.30% 2025-04-15
CVE-2024-39707 PoC ? N/A UNKNOWN / UNPATCHED 0.06% 2024-11-14
CVE-2023-28149 PoC ? N/A UNKNOWN / UNPATCHED 0.06% 2024-07-31
CVE-2024-25079 PoC ? N/A UNKNOWN / UNPATCHED 0.11% 2024-05-15
CVE-2024-27353 7.4 HIGH UNKNOWN / UNPATCHED 0.17% 2024-05-15
CVE-2024-25078 PoC ? N/A UNKNOWN / UNPATCHED 0.11% 2024-05-15
CVE-2023-47252 PoC ? N/A UNKNOWN / UNPATCHED 0.13% 2024-04-26
CVE-2022-46897 ? N/A UNKNOWN / UNPATCHED 0.05% 2024-04-22
CVE-2020-5953 7.5 HIGH PATCH UNDER REVIEW 0.28% 2022-02-03
CVE-2021-41841 8.2 HIGH PATCH UNDER REVIEW 0.30% 2022-02-03
CVE-2021-33625 7.5 HIGH PATCH UNDER REVIEW 0.32% 2022-02-03
CVE-2021-43323 8.2 HIGH PATCH UNDER REVIEW 0.35% 2022-02-03
CVE-2021-42554 PoC 8.2 HIGH PATCH UNDER REVIEW 0.33% 2022-02-03
CVE-2022-24030 7.5 HIGH PATCH UNDER REVIEW 0.30% 2022-02-03
CVE-2021-42060 8.2 HIGH PATCH UNDER REVIEW 0.35% 2022-02-03
View all 36 CVEs for Insyde →
▸Intel
Trust ScoreD — RISKY
Max CVSS7.5
Last Updated2026-08-03
▸Top Weaknesses
CWE-787
Out-of-Bounds Write
3 occurrences in Insyde CVEs (23% of total)
CWE-787 ⓘ
3
CWE-20
Unknown Weakness Type
2 occurrences in Insyde CVEs (15% of total)
CWE-20 ⓘ
2
CWE-126
Unknown Weakness Type
2 occurrences in Insyde CVEs (15% of total)
CWE-126 ⓘ
2
CWE-252 (Unchecked Return Value)
Unknown Weakness Type
1 occurrence in Insyde CVEs (8% of total)
CWE-252 (Unchecked Return Value) ⓘ
1
CWE-787 (Out-of-bounds Write)
Unknown Weakness Type
1 occurrence in Insyde CVEs (8% of total)
CWE-787 (Out-of-bounds Write) ⓘ
1
CWE-126 (Buffer Over-read)
Unknown Weakness Type
1 occurrence in Insyde CVEs (8% of total)
CWE-126 (Buffer Over-read) ⓘ
1
CWE-306
Missing Authentication
1 occurrence in Insyde CVEs (8% of total)
CWE-306 ⓘ
1
CWE-119
Buffer Overflow
1 occurrence in Insyde CVEs (8% of total)
CWE-119 ⓘ
1
▸Company Profile

Insyde Software is a Taiwan-based company that develops UEFI firmware and BIOS solutions for embedded systems, servers, and mobile devices. Their products are widely used in x86 and ARM-based platforms, making them a key vendor in the hardware security supply chain, as vulnerabilities in their firmware can have broad impact on device integrity and boot security.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -14% better
CVE count 2025 vs 2024:  7 → 6 CVEs
Patch Speed ⓘ Poor (>65% open)
6% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€600K
Est. GDPR High
€6.0M

Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Insyde D valtersit.com