CVEvulnerability

CVE-2023-2290

6.7 MEDIUM Published 2023-06-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-06-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.4 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-787

Description

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected configurations

• lenovo thinkpad e14 firmware 1.23 • lenovo thinkpad e14 gen 2 firmware 1.55 • lenovo thinkpad e14 gen 4 firmware 1.18 • lenovo thinkpad e14 gen 4 firmware 1.16 • lenovo thinkpad e15 firmware 1.23 • lenovo thinkpad e15 gen 2 firmware 1.55 • lenovo thinkpad e15 gen 4 firmware 1.18 • lenovo thinkpad e15 gen 4 firmware 1.16 • lenovo thinkpad e490 firmware 1.34 • lenovo thinkpad e490s firmware 1.34 • lenovo thinkpad e590 firmware 1.34 • lenovo thinkpad l13 gen 3 firmware 1.14 • lenovo thinkpad l13 yoga gen 3 firmware 1.14 • lenovo thinkpad l14 firmware 1.2 • lenovo thinkpad l14 firmware 1.3 • lenovo thinkpad l14 firmware 1.48 • lenovo thinkpad l14 firmware 1.61 • lenovo thinkpad l14 firmware 1.26 • lenovo thinkpad l15 firmware 1.2 • lenovo thinkpad l15 firmware 1.3 • lenovo thinkpad l15 gen 2 firmware 1.48 • lenovo thinkpad l15 gen 2 firmware 1.61 • lenovo thinkpad l15 gen 3 firmware 1.26 • lenovo thinkpad l490 firmware 1.32 • lenovo thinkpad l590 firmware 1.32 • lenovo thinkpad p1 gen 2 firmware 1.46 • lenovo thinkpad p1 gen 3 firmware 1.27 • lenovo thinkpad p1 gen 4 firmware 1.22 • lenovo thinkpad p1 gen 5 firmware 1.16 • lenovo thinkpad p14s gen 1 firmware 1.28 • lenovo thinkpad p14s gen 2 firmware 1.05 • lenovo thinkpad p14s gen 2 firmware 1.55 • lenovo thinkpad p14s gen 2 firmware 1.34 • lenovo thinkpad p14s gen 3 firmware 1.11 • lenovo thinkpad p14s gen 3 firmware 1.31 • lenovo thinkpad p15 gen 1 firmware 1.32 • lenovo thinkpad p15 gen 2 firmware 1.25 • lenovo thinkpad p15s gen 1 firmware 1.28 • lenovo thinkpad p15s gen 2 firmware 1.05 • lenovo thinkpad p15s gen 2 firmware 1.55 • lenovo thinkpad p15v gen 1 firmware 1.32 • lenovo thinkpad p15v gen 2 firmware 1.19 • lenovo thinkpad p15v gen 3 firmware 1.15 • lenovo thinkpad p16 gen 1 firmware 1.17 • lenovo thinkpad p16s gen 1 firmware 1.11 • lenovo thinkpad p16s gen 1 firmware 1.31 • lenovo thinkpad p17 gen 1 firmware 1.32 • lenovo thinkpad p17 gen 2 firmware 1.25 • lenovo thinkpad p43s firmware 1.21 • lenovo thinkpad p43s firmware 1.79 • lenovo thinkpad p53 firmware 1.4 • lenovo thinkpad p53s firmware 1.21 • lenovo thinkpad p53s firmware 1.79 • lenovo thinkpad p73 firmware 1.4 • lenovo thinkpad t14 gen 1 firmware 1.28 • lenovo thinkpad t14 gen 2 firmware 1.05 • lenovo thinkpad t14 gen 2 firmware 1.55 • lenovo thinkpad t14 gen 2 firmware 1.34 • lenovo thinkpad t14 gen 3 firmware 1.11 • lenovo thinkpad t14 gen 3 firmware 1.31 … and 56 more

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References