6.7

CVE-2023-2290

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LenovoThinkpad E14 Firmware Version1.23
   LenovoThinkpad E14 Version-
LenovoThinkpad E14 Gen 2 Firmware Version1.55
   LenovoThinkpad E14 Gen 2 Version-
LenovoThinkpad E14 Gen 4 Firmware Version1.18
   LenovoThinkpad E14 Gen 4 Version-
LenovoThinkpad E14 Gen 4 Firmware Version1.16
   LenovoThinkpad E14 Gen 4 Version-
LenovoThinkpad E15 Firmware Version1.23
   LenovoThinkpad E15 Version-
LenovoThinkpad E15 Gen 2 Firmware Version1.55
   LenovoThinkpad E15 Gen 2 Version-
LenovoThinkpad E15 Gen 4 Firmware Version1.18
   LenovoThinkpad E15 Gen 4 Version-
LenovoThinkpad E15 Gen 4 Firmware Version1.16
   LenovoThinkpad E15 Gen 4 Version-
LenovoThinkpad E490 Firmware Version1.34
   LenovoThinkpad E490 Version-
LenovoThinkpad E490s Firmware Version1.34
   LenovoThinkpad E490s Version-
LenovoThinkpad E590 Firmware Version1.34
   LenovoThinkpad E590 Version-
LenovoThinkpad L13 Gen 3 Firmware Version1.14
   LenovoThinkpad L13 Gen 3 Version-
LenovoThinkpad L14 Firmware Version1.2
   LenovoThinkpad L14 Version-
LenovoThinkpad L14 Firmware Version1.3
   LenovoThinkpad L14 Version-
LenovoThinkpad L14 Firmware Version1.48
   LenovoThinkpad L14 Version-
LenovoThinkpad L14 Firmware Version1.61
   LenovoThinkpad L14 Version-
LenovoThinkpad L14 Firmware Version1.26
   LenovoThinkpad L14 Version-
LenovoThinkpad L15 Firmware Version1.2
   LenovoThinkpad L15 Version-
LenovoThinkpad L15 Firmware Version1.3
   LenovoThinkpad L15 Version-
LenovoThinkpad L15 Gen 2 Firmware Version1.48
   LenovoThinkpad L15 Gen 2 Version-
LenovoThinkpad L15 Gen 2 Firmware Version1.61
   LenovoThinkpad L15 Gen 2 Version-
LenovoThinkpad L15 Gen 3 Firmware Version1.26
   LenovoThinkpad L15 Gen 3 Version-
LenovoThinkpad L490 Firmware Version1.32
   LenovoThinkpad L490 Version-
LenovoThinkpad L590 Firmware Version1.32
   LenovoThinkpad L590 Version-
LenovoThinkpad P1 Gen 2 Firmware Version1.46
   LenovoThinkpad P1 Gen 2 Version-
LenovoThinkpad P1 Gen 3 Firmware Version1.27
   LenovoThinkpad P1 Gen 3 Version-
LenovoThinkpad P1 Gen 4 Firmware Version1.22
   LenovoThinkpad P1 Gen 4 Version-
LenovoThinkpad P1 Gen 5 Firmware Version1.16
   LenovoThinkpad P1 Gen 5 Version-
LenovoThinkpad P14s Gen 1 Firmware Version1.28
   LenovoThinkpad P14s Gen 1 Version-
LenovoThinkpad P14s Gen 2 Firmware Version1.05
   LenovoThinkpad P14s Gen 2 Version-
LenovoThinkpad P14s Gen 2 Firmware Version1.55
   LenovoThinkpad P14s Gen 2 Version-
LenovoThinkpad P14s Gen 2 Firmware Version1.34
   LenovoThinkpad P14s Gen 2 Version-
LenovoThinkpad P14s Gen 3 Firmware Version1.11
   LenovoThinkpad P14s Gen 3 Version-
LenovoThinkpad P14s Gen 3 Firmware Version1.31
   LenovoThinkpad P14s Gen 3 Version-
LenovoThinkpad P15 Gen 1 Firmware Version1.32
   LenovoThinkpad P15 Gen 1 Version-
LenovoThinkpad P15 Gen 2 Firmware Version1.25
   LenovoThinkpad P15 Gen 2 Version-
LenovoThinkpad P15s Gen 1 Firmware Version1.28
   LenovoThinkpad P15s Gen 1 Version-
LenovoThinkpad P15s Gen 2 Firmware Version1.05
   LenovoThinkpad P15s Gen 2 Version-
LenovoThinkpad P15s Gen 2 Firmware Version1.55
   LenovoThinkpad P15s Gen 2 Version-
LenovoThinkpad P15v Gen 1 Firmware Version1.32
   LenovoThinkpad P15v Gen 1 Version-
LenovoThinkpad P15v Gen 2 Firmware Version1.19
   LenovoThinkpad P15v Gen 2 Version-
LenovoThinkpad P15v Gen 3 Firmware Version1.15
   LenovoThinkpad P15v Gen 3 Version-
LenovoThinkpad P16 Gen 1 Firmware Version1.17
   LenovoThinkpad P16 Gen 1 Version-
LenovoThinkpad P16s Gen 1 Firmware Version1.11
   LenovoThinkpad P16s Gen 1 Version-
LenovoThinkpad P16s Gen 1 Firmware Version1.31
   LenovoThinkpad P16s Gen 1 Version-
LenovoThinkpad P17 Gen 1 Firmware Version1.32
   LenovoThinkpad P17 Gen 1 Version-
LenovoThinkpad P17 Gen 2 Firmware Version1.25
   LenovoThinkpad P17 Gen 2 Version-
LenovoThinkpad P43s Firmware Version1.21
   LenovoThinkpad P43s Version-
LenovoThinkpad P43s Firmware Version1.79
   LenovoThinkpad P43s Version-
LenovoThinkpad P53 Firmware Version1.4
   LenovoThinkpad P53 Version-
LenovoThinkpad P53s Firmware Version1.21
   LenovoThinkpad P53s Version-
LenovoThinkpad P53s Firmware Version1.79
   LenovoThinkpad P53s Version-
LenovoThinkpad P73 Firmware Version1.4
   LenovoThinkpad P73 Version-
LenovoThinkpad T14 Gen 1 Firmware Version1.28
   LenovoThinkpad T14 Gen 1 Version-
LenovoThinkpad T14 Gen 1 Firmware Version1.28
   LenovoThinkpad T14 Gen 1 Version-
LenovoThinkpad T14 Gen 2 Firmware Version1.05
   LenovoThinkpad T14 Gen 2 Version-
LenovoThinkpad T14 Gen 2 Firmware Version1.55
   LenovoThinkpad T14 Gen 2 Version-
LenovoThinkpad T14 Gen 2 Firmware Version1.34
   LenovoThinkpad T14 Gen 2 Version-
LenovoThinkpad T14 Gen 3 Firmware Version1.11
   LenovoThinkpad T14 Gen 3 Version-
LenovoThinkpad T14 Gen 3 Firmware Version1.31
   LenovoThinkpad T14 Gen 3 Version-
LenovoThinkpad T14s Firmware Version1.26
   LenovoThinkpad T14s Version-
LenovoThinkpad T14s Gen 2 Firmware Version1.51
   LenovoThinkpad T14s Gen 2 Version-
LenovoThinkpad T14s Gen 2 Firmware Version1.37
   LenovoThinkpad T14s Gen 2 Version-
LenovoThinkpad T14s Gen 3 Firmware Version1.33
   LenovoThinkpad T14s Gen 3 Version-
LenovoThinkpad T15 Firmware Version1.28
   LenovoThinkpad T15 Version-
LenovoThinkpad T15 Gen 2 Firmware Version1.05
   LenovoThinkpad T15 Gen 2 Version-
LenovoThinkpad T15 Gen 2 Firmware Version1.55
   LenovoThinkpad T15 Gen 2 Version-
LenovoThinkpad T15g Gen 1 Firmware Version1.32
   LenovoThinkpad T15g Gen 1 Version-
LenovoThinkpad T15g Gen 2 Firmware Version1.25
   LenovoThinkpad T15g Gen 2 Version-
LenovoThinkpad T15p Gen 1 Firmware Version1.32
   LenovoThinkpad T15p Gen 1 Version-
LenovoThinkpad T15p Gen 2 Firmware Version1.19
   LenovoThinkpad T15p Gen 2 Version-
LenovoThinkpad T15p Gen 3 Firmware Version1.15
   LenovoThinkpad T15p Gen 3 Version-
LenovoThinkpad T16 Gen 1 Firmware Version1.11
   LenovoThinkpad T16 Gen 1 Version-
LenovoThinkpad T16 Gen 1 Firmware Version1.31
   LenovoThinkpad T16 Gen 1 Version-
LenovoThinkpad T490 Firmware Version1.21
   LenovoThinkpad T490 Version-
LenovoThinkpad T490 Firmware Version1.79
   LenovoThinkpad T490 Version-
LenovoThinkpad T490 Firmware Version1.21
   LenovoThinkpad T490 Version-
LenovoThinkpad T490 Firmware Version1.79
   LenovoThinkpad T490 Version-
LenovoThinkpad T490 Firmware Version1.21
   LenovoThinkpad T490 Version-
LenovoThinkpad T490 Firmware Version1.79
   LenovoThinkpad T490 Version-
LenovoThinkpad T490s Firmware Version1.24
   LenovoThinkpad T490s Version-
LenovoThinkpad T490s Firmware Version1.79
   LenovoThinkpad T490s Version-
LenovoThinkpad T590 Firmware Version1.21
   LenovoThinkpad T590 Version-
LenovoThinkpad T590 Firmware Version1.79
   LenovoThinkpad T590 Version-
LenovoThinkpad X13 Firmware Version1.26
   LenovoThinkpad X13 Version-
LenovoThinkpad X13 Gen 2 Firmware Version1.51
   LenovoThinkpad X13 Gen 2 Version-
LenovoThinkpad X13 Gen 2 Firmware Version1.37
   LenovoThinkpad X13 Gen 2 Version-
LenovoThinkpad X13 Gen 3 Firmware Version1.33
   LenovoThinkpad X13 Gen 3 Version-
LenovoThinkpad X390 Firmware Version1.79_1.24
   LenovoThinkpad X390 Version-
LenovoThinkpad X390 Firmware Version1.24
   LenovoThinkpad X390 Version-
LenovoThinkpad X390 Firmware Version1.79
   LenovoThinkpad X390 Version-
LenovoThinkpad X390 Yoga Firmware Version1.95
   LenovoThinkpad X390 Yoga Version-
LenovoThinkpad Z13 Gen 1 Firmware Version1.57
   LenovoThinkpad Z13 Gen 1 Version-
LenovoThinkpad Z16 Gen 1 Firmware Version1.57
   LenovoThinkpad Z16 Gen 1 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.04% 0.091
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
psirt@lenovo.com 6.4 0.5 5.9
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.