Answer in brief
CVE-2020-5953 records a Unknown severity vulnerability in CVE Program Container. The current sources do not mark it as known exploited. The current feed maps n/a/n/a (generic), Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC127E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps n/a/n/a (generic), Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC127E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| n/a/n/ageneric | n/a | Not reported |
| Siemens/SIMATIC Field PG M5generic | >=0 <V22.01.10 | V22.01.10 |
| Siemens/SIMATIC Field PG M6generic | >=0 <V26.01.13 | V26.01.13 |
| Siemens/SIMATIC IPC127Egeneric | >=0 <V27.01.09 | V27.01.09 |
| Siemens/SIMATIC IPC227Ggeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC277Ggeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC277G PROgeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC327Ggeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC377Ggeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC427Egeneric | >=0 <V21.01.17 | V21.01.17 |
| Siemens/SIMATIC IPC477Egeneric | >=0 <V21.01.17 | V21.01.17 |
| Siemens/SIMATIC IPC477E PROgeneric | >=0 <V21.01.17 | V21.01.17 |
| Siemens/SIMATIC IPC627Egeneric | >=0 <V25.02.12 | V25.02.12 |
| Siemens/SIMATIC IPC647Egeneric | >=0 <V25.02.12 | V25.02.12 |
| Siemens/SIMATIC IPC677Egeneric | >=0 <V25.02.12 | V25.02.12 |
| Siemens/SIMATIC IPC847Egeneric | >=0 <V25.02.12 | V25.02.12 |
| Siemens/SIMATIC ITP1000generic | >=0 <V23.01.10 | V23.01.10 |
| Siemens/SIPLUS IPC427Egeneric | >=0 <V21.01.17 | V21.01.17 |
Published upstream
Feb 3, 2022
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 11, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 11, 2026
A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).
Quoted source text, attributed separately from HOL analysis.
Answer in brief
CVE-2020-5953 records a Unknown severity vulnerability in CVE Program Container. The current sources do not mark it as known exploited. The current feed maps n/a/n/a (generic), Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC127E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps n/a/n/a (generic), Siemens/SIMATIC Field PG M5 (generic), Siemens/SIMATIC Field PG M6 (generic), Siemens/SIMATIC IPC127E (generic) and additional mapped packages. Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| n/a/n/ageneric | n/a | Not reported |
| Siemens/SIMATIC Field PG M5generic | >=0 <V22.01.10 | V22.01.10 |
| Siemens/SIMATIC Field PG M6generic | >=0 <V26.01.13 | V26.01.13 |
| Siemens/SIMATIC IPC127Egeneric | >=0 <V27.01.09 | V27.01.09 |
| Siemens/SIMATIC IPC227Ggeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC277Ggeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC277G PROgeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC327Ggeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC377Ggeneric | >=0 <V28.01.04 | V28.01.04 |
| Siemens/SIMATIC IPC427Egeneric | >=0 <V21.01.17 | V21.01.17 |
| Siemens/SIMATIC IPC477Egeneric | >=0 <V21.01.17 | V21.01.17 |
| Siemens/SIMATIC IPC477E PROgeneric | >=0 <V21.01.17 | V21.01.17 |
| Siemens/SIMATIC IPC627Egeneric | >=0 <V25.02.12 | V25.02.12 |
| Siemens/SIMATIC IPC647Egeneric | >=0 <V25.02.12 | V25.02.12 |
| Siemens/SIMATIC IPC677Egeneric | >=0 <V25.02.12 | V25.02.12 |
| Siemens/SIMATIC IPC847Egeneric | >=0 <V25.02.12 | V25.02.12 |
| Siemens/SIMATIC ITP1000generic | >=0 <V23.01.10 | V23.01.10 |
| Siemens/SIPLUS IPC427Egeneric | >=0 <V21.01.17 | V21.01.17 |
Published upstream
Feb 3, 2022
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 11, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 11, 2026
A vulnerability exists in System Management Interrupt (SWSMI) handler of InsydeH2O UEFI Firmware code located in SWSMI handler that dereferences gRT (EFI_RUNTIME_SERVICES) pointer to call a GetVariable service, which is located outside of SMRAM. This can result in code execution in SMM (escalating privilege from ring 0 to ring -2).
Quoted source text, attributed separately from HOL analysis.