CVEvulnerability
CVE-2023-43581
6.7 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-11-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-120
Description
A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
Affected configurations
• lenovo ideacentre c5-14imb05 firmware (< o4hkt3ca)
• lenovo ideacentre 3-07ada05 firmware (< o4fkt39a)
• lenovo ideacentre 3-07imb05 firmware (< m2vkt21a)
• lenovo ideacentre 5 14iab7 firmware (< m42kt46a)
• lenovo ideacentre 5 14irb8 firmware (< m4ukt36a)
• lenovo ideacentre 5-14acn6 firmware
• lenovo ideacentre t540-15ama g firmware
• lenovo thinkcentre neo 70t gen 3 firmware (< m40kt45a)
• lenovo thinkcentre neo 50t gen 3 firmware (< m42kt46a)
• lenovo thinkcentre neo 50a 24 gen 4 firmware (< o5xkt18a)
• lenovo thinkcentre neo 50a 24 gen 3 firmware (< o5rkt41a)
• lenovo thinkcentre neo 30a 27 gen 4 firmware (< o5nkt33a)
• lenovo thinkcentre neo 30a 27 gen 4 firmware o5nkt33a
• lenovo thinkcentre neo 30a 27 gen 3 firmware (< o5nkt33a)
• lenovo thinkcentre neo 30a 24 gen 4 firmware (< o5nkt33a)
• lenovo thinkcentre neo 30a 24 gen 3 firmware (< o5nkt33a)
• lenovo thinkcentre neo 30a 22 gen 4 firmware (< o5nkt33a)
• lenovo thinkcentre neo 30a 22 gen 3 firmware (< o5nkt33a)
• lenovo thinkcentre m920z all-in-one firmware (< m1mkt56a)
• lenovo thinkcentre m90t gen 3 firmware (< m40kt45a)
• lenovo thinkcentre m90t firmware (< m2tkt55a)
• lenovo thinkcentre m90s gen 3 firmware (< m40kt45a)
• lenovo thinkcentre m90s firmware (< m2tkt55a)
• lenovo thinkcentre m90q tiny firmware
• lenovo thinkcentre m90q gen 3 firmware
• lenovo thinkcentre m90q gen 2 firmware
• lenovo thinkcentre m90a pro gen 3 firmware (< m4hkt1da)
• lenovo thinkcentre m90a gen 3 firmware (< m4ikt1da)
• lenovo thinkcentre m90a gen 2 firmware (< m3lkt2aa)
• lenovo thinkcentre m90a firmware (< m2rkt57a)
• lenovo thinkcentre m80t gen 3 firmware (< m40kt45a)
• lenovo thinkcentre m80t firmware (< m2tkt55a)
• lenovo thinkcentre m80s gen 3 firmware (< m40kt45a)
• lenovo thinkcentre m80s firmware (< m2tkt55a)
• lenovo thinkcentre m80q gen 3 firmware
• lenovo thinkcentre m80q firmware
• lenovo thinkcentre m75t gen 2 firmware
• lenovo thinkcentre m75s gen 2 firmware
• lenovo thinkcentre m75q gen 2 firmware
• lenovo thinkcentre m75n firmware (< m33kt29a)
• lenovo thinkcentre m70t gen 3 firmware (< m41kt45a)
• lenovo thinkcentre m70t firmware (< m2tkt55a)
• lenovo thinkcentre m70s gen 3 firmware (< m41kt45a)
• lenovo thinkcentre m70s firmware (< m2tkt55a)
• lenovo thinkcentre m70q gen 2 firmware
• lenovo thinkcentre m70q firmware
• lenovo thinkcentre m70c firmware (< m2vkt21a)
• lenovo thinkcentre m70a gen 3 firmware
• lenovo thinkcentre m630e firmware (< m28kt42a)
• lenovo thinkcentre m625q firmware
• lenovo loq 17irb8 firmware (< m4ukt36a)
• lenovo legion t5 26iab7 firmware (< o5lkt2ba)
• lenovo legion t7-34imz5 firmware (< o5fkt17a)
• lenovo legion t7-34iaz7 firmware (< o5hkt2ca)
• lenovo legion t7 34irz8 firmware (< o5ukt1fa)
• lenovo legion t5 26irb8 firmware (< o5tkt1ca)
• lenovo ideacentre mini 5-01imh05 firmware
• lenovo ideacentre mini 5 01iaq7 firmware (< o53kt10a)
• lenovo ideacentre gaming 5-14iob6 firmware (< m3gkt3da)
• lenovo ideacentre gaming 5-14acn6 firmware
… and 53 more
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- https://support.lenovo.com/us/en/product_security/LEN-141775 Vendor Advisory
- https://support.lenovo.com/us/en/product_security/LEN-141775 Vendor Advisory