CVEvulnerability

CVE-2023-45075

6.7 MEDIUM Published 2023-11-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-125

Description

A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

Affected configurations

• lenovo ideacentre c5-14imb05 firmware (< o4hkt3ca) • lenovo ideacentre 3-07ada05 firmware (< o4fkt39a) • lenovo ideacentre 3-07imb05 firmware (< m2vkt21a) • lenovo ideacentre g5-14imb05 firmware (< o4hkt3ca) • lenovo ideacentre 5-14iob6 firmware (< m3gkt3da) • lenovo ideacentre creator 5-14iob6 firmware (< m3gkt3da) • lenovo ideacentre g5-14amr05 firmware (< o4zkt2ba) • lenovo ideacentre gaming 5-14iob6 firmware (< m3gkt3da) • lenovo ideacentre mini 5 01iaq7 firmware (< o53kt10a) • lenovo ideacentre mini 5-01imh05 firmware (< o4ekt1ba) • lenovo legion t7-34imz5 firmware (< o5fkt17a) • lenovo thinkcentre m625q firmware (< m1wkt52a) • lenovo thinkcentre m630e firmware • lenovo thinkcentre m70a firmware (< m2skt29a) • lenovo thinkcentre m920z all-in-one firmware (< m1mkt56a) • lenovo thinkcentre m920x firmware (< m1ukt72a) • lenovo thinkcentre m920t firmware (< m1ukt72a) • lenovo thinkcentre m920s firmware (< m1ukt72a) • lenovo thinkcentre m920q firmware (< m1ukt72a) • lenovo thinkcentre m90t firmware (< m2tkt55a) • lenovo thinkcentre m90s firmware (< m2tkt55a) • lenovo thinkcentre m90q tiny firmware (< m2wkt5aa) • lenovo thinkcentre m90a firmware (< m2rkt57a) • lenovo thinkcentre m820z all-in-one firmware (< m1nkt62a) • lenovo thinkcentre m80t firmware (< m2tkt55a) • lenovo thinkcentre m80s firmware (< m2tkt55a) • lenovo thinkcentre m80q firmware (< m2wkt5aa) • lenovo thinkcentre m75t gen 2 firmware • lenovo thinkcentre m75s gen 2 firmware • lenovo thinkcentre m75q gen 2 firmware (< m47kt30a) • lenovo thinkcentre m75n firmware (< m33kt27a) • lenovo thinkcentre m720t firmware (< m1ukt72a) • lenovo thinkcentre m720s firmware (< m1ukt72a) • lenovo thinkcentre m720q firmware (< m1ukt72a) • lenovo thinkcentre m70t firmware (< m2tkt55a) • lenovo thinkcentre m70s firmware (< m2tkt55a) • lenovo thinkcentre m70q firmware (< m2wkt5aa) • lenovo thinkcentre m70c firmware (< m2vkt21a) • lenovo v50t-13iob g2 firmware (< m3gkt3da) • lenovo v55t gen 2 13acn firmware (< o5jkt23a) • lenovo v50t-13imh firmware (< m4pkt13a) • lenovo v50t-13imb firmware (< o4hkt3ca) • lenovo v50s-07imb firmware (< m2vkt21a) • lenovo v50a-24imb firmware (< m36kt32a) • lenovo v50a-22imb firmware (< m36kt32a) • lenovo v30a-24iml firmware (< m37kt31a) • lenovo v30a-22iml firmware (< m37kt31a) • lenovo thinkedge se30 firmware (< m3fkt2da) • lenovo thinkstation p920 workstation firmware • lenovo thinkstation p720 workstation firmware • lenovo thinkstation p520c workstation firmware • lenovo thinkstation p520 workstation firmware • lenovo thinkstation p360 workstation firmware • lenovo thinkstation p360 workstation firmware (< s0ekt45a) • lenovo thinkstation p350 workstation firmware • lenovo thinkstation p348 workstation firmware (< m3kkt3ba) • lenovo thinkstation p340 workstation firmware (< s08kt55a) • lenovo thinkstation p340 tiny workstation firmware (< m2wkt5aa) • lenovo thinkstation p330 workstation 2nd gen firmware (< m1vkt72a) • lenovo thinkstation p330 workstation firmware (< m1vkt72a) … and 2 more

Related

Weakness · CWE (1)

  • CWE-125 Out-of-bounds Read weakness

References