CVE-2023-2290

EPSS 0.04%
Published 26.06.2023 20:15:09
Last modified 21.11.2024 07:58:19
Source psirt@lenovo.com
Teams watchlist Login
Open Login

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Lenovo ≫ Thinkpad E14 Firmware Version1.23

Lenovo ≫ Thinkpad E14 Version-

Lenovo ≫ Thinkpad E14 Gen 2 Firmware Version1.55

Lenovo ≫ Thinkpad E14 Gen 2 Version-

Lenovo ≫ Thinkpad E14 Gen 4 Firmware Version1.18

Lenovo ≫ Thinkpad E14 Gen 4 Version-

Lenovo ≫ Thinkpad E14 Gen 4 Firmware Version1.16

Lenovo ≫ Thinkpad E14 Gen 4 Version-

Lenovo ≫ Thinkpad E15 Firmware Version1.23

Lenovo ≫ Thinkpad E15 Version-

Lenovo ≫ Thinkpad E15 Gen 2 Firmware Version1.55

Lenovo ≫ Thinkpad E15 Gen 2 Version-

Lenovo ≫ Thinkpad E15 Gen 4 Firmware Version1.18

Lenovo ≫ Thinkpad E15 Gen 4 Version-

Lenovo ≫ Thinkpad E15 Gen 4 Firmware Version1.16

Lenovo ≫ Thinkpad E15 Gen 4 Version-

Lenovo ≫ Thinkpad E490 Firmware Version1.34

Lenovo ≫ Thinkpad E490 Version-

Lenovo ≫ Thinkpad E490s Firmware Version1.34

Lenovo ≫ Thinkpad E490s Version-

Lenovo ≫ Thinkpad E590 Firmware Version1.34

Lenovo ≫ Thinkpad E590 Version-

Lenovo ≫ Thinkpad L13 Gen 3 Firmware Version1.14

Lenovo ≫ Thinkpad L13 Gen 3 Version-

Lenovo ≫ Thinkpad L13 Yoga Gen 3 Firmware Version1.14

Lenovo ≫ Thinkpad L13 Yoga Gen 3 Version-

Lenovo ≫ Thinkpad L14 Firmware Version1.2

Lenovo ≫ Thinkpad L14 Version-

Lenovo ≫ Thinkpad L14 Firmware Version1.3

Lenovo ≫ Thinkpad L14 Version-

Lenovo ≫ Thinkpad L14 Firmware Version1.48

Lenovo ≫ Thinkpad L14 Version-

Lenovo ≫ Thinkpad L14 Firmware Version1.61

Lenovo ≫ Thinkpad L14 Version-

Lenovo ≫ Thinkpad L14 Firmware Version1.26

Lenovo ≫ Thinkpad L14 Version-

Lenovo ≫ Thinkpad L15 Firmware Version1.2

Lenovo ≫ Thinkpad L15 Version-

Lenovo ≫ Thinkpad L15 Firmware Version1.3

Lenovo ≫ Thinkpad L15 Version-

Lenovo ≫ Thinkpad L15 Gen 2 Firmware Version1.48

Lenovo ≫ Thinkpad L15 Gen 2 Version-

Lenovo ≫ Thinkpad L15 Gen 2 Firmware Version1.61

Lenovo ≫ Thinkpad L15 Gen 2 Version-

Lenovo ≫ Thinkpad L15 Gen 3 Firmware Version1.26

Lenovo ≫ Thinkpad L15 Gen 3 Version-

Lenovo ≫ Thinkpad L490 Firmware Version1.32

Lenovo ≫ Thinkpad L490 Version-

Lenovo ≫ Thinkpad L590 Firmware Version1.32

Lenovo ≫ Thinkpad L590 Version-

Lenovo ≫ Thinkpad P1 Gen 2 Firmware Version1.46

Lenovo ≫ Thinkpad P1 Gen 2 Version-

Lenovo ≫ Thinkpad P1 Gen 3 Firmware Version1.27

Lenovo ≫ Thinkpad P1 Gen 3 Version-

Lenovo ≫ Thinkpad P1 Gen 4 Firmware Version1.22

Lenovo ≫ Thinkpad P1 Gen 4 Version-

Lenovo ≫ Thinkpad P1 Gen 5 Firmware Version1.16

Lenovo ≫ Thinkpad P1 Gen 5 Version-

Lenovo ≫ Thinkpad P14s Gen 1 Firmware Version1.28

Lenovo ≫ Thinkpad P14s Gen 1 Version-

Lenovo ≫ Thinkpad P14s Gen 2 Firmware Version1.05

Lenovo ≫ Thinkpad P14s Gen 2 Version-

Lenovo ≫ Thinkpad P14s Gen 2 Firmware Version1.55

Lenovo ≫ Thinkpad P14s Gen 2 Version-

Lenovo ≫ Thinkpad P14s Gen 2 Firmware Version1.34

Lenovo ≫ Thinkpad P14s Gen 2 Version-

Lenovo ≫ Thinkpad P14s Gen 3 Firmware Version1.11

Lenovo ≫ Thinkpad P14s Gen 3 Version-

Lenovo ≫ Thinkpad P14s Gen 3 Firmware Version1.31

Lenovo ≫ Thinkpad P14s Gen 3 Version-

Lenovo ≫ Thinkpad P15 Gen 1 Firmware Version1.32

Lenovo ≫ Thinkpad P15 Gen 1 Version-

Lenovo ≫ Thinkpad P15 Gen 2 Firmware Version1.25

Lenovo ≫ Thinkpad P15 Gen 2 Version-

Lenovo ≫ Thinkpad P15s Gen 1 Firmware Version1.28

Lenovo ≫ Thinkpad P15s Gen 1 Version-

Lenovo ≫ Thinkpad P15s Gen 2 Firmware Version1.05

Lenovo ≫ Thinkpad P15s Gen 2 Version-

Lenovo ≫ Thinkpad P15s Gen 2 Firmware Version1.55

Lenovo ≫ Thinkpad P15s Gen 2 Version-

Lenovo ≫ Thinkpad P15v Gen 1 Firmware Version1.32

Lenovo ≫ Thinkpad P15v Gen 1 Version-

Lenovo ≫ Thinkpad P15v Gen 2 Firmware Version1.19

Lenovo ≫ Thinkpad P15v Gen 2 Version-

Lenovo ≫ Thinkpad P15v Gen 3 Firmware Version1.15

Lenovo ≫ Thinkpad P15v Gen 3 Version-

Lenovo ≫ Thinkpad P16 Gen 1 Firmware Version1.17

Lenovo ≫ Thinkpad P16 Gen 1 Version-

Lenovo ≫ Thinkpad P16s Gen 1 Firmware Version1.11

Lenovo ≫ Thinkpad P16s Gen 1 Version-

Lenovo ≫ Thinkpad P16s Gen 1 Firmware Version1.31

Lenovo ≫ Thinkpad P16s Gen 1 Version-

Lenovo ≫ Thinkpad P17 Gen 1 Firmware Version1.32

Lenovo ≫ Thinkpad P17 Gen 1 Version-

Lenovo ≫ Thinkpad P17 Gen 2 Firmware Version1.25

Lenovo ≫ Thinkpad P17 Gen 2 Version-

Lenovo ≫ Thinkpad P43s Firmware Version1.21

Lenovo ≫ Thinkpad P43s Version-

Lenovo ≫ Thinkpad P43s Firmware Version1.79

Lenovo ≫ Thinkpad P43s Version-

Lenovo ≫ Thinkpad P53 Firmware Version1.4

Lenovo ≫ Thinkpad P53 Version-

Lenovo ≫ Thinkpad P53s Firmware Version1.21

Lenovo ≫ Thinkpad P53s Version-

Lenovo ≫ Thinkpad P53s Firmware Version1.79

Lenovo ≫ Thinkpad P53s Version-

Lenovo ≫ Thinkpad P73 Firmware Version1.4

Lenovo ≫ Thinkpad P73 Version-

Lenovo ≫ Thinkpad T14 Gen 1 Firmware Version1.28

Lenovo ≫ Thinkpad T14 Gen 1 Version-

Lenovo ≫ Thinkpad T14 Gen 1 Firmware Version1.28

Lenovo ≫ Thinkpad T14 Gen 1 Version-

Lenovo ≫ Thinkpad T14 Gen 2 Firmware Version1.05

Lenovo ≫ Thinkpad T14 Gen 2 Version-

Lenovo ≫ Thinkpad T14 Gen 2 Firmware Version1.55

Lenovo ≫ Thinkpad T14 Gen 2 Version-

Lenovo ≫ Thinkpad T14 Gen 2 Firmware Version1.34

Lenovo ≫ Thinkpad T14 Gen 2 Version-

Lenovo ≫ Thinkpad T14 Gen 3 Firmware Version1.11

Lenovo ≫ Thinkpad T14 Gen 3 Version-

Lenovo ≫ Thinkpad T14 Gen 3 Firmware Version1.31

Lenovo ≫ Thinkpad T14 Gen 3 Version-

Lenovo ≫ Thinkpad T14s Firmware Version1.26

Lenovo ≫ Thinkpad T14s Version-

Lenovo ≫ Thinkpad T14s Gen 2 Firmware Version1.51

Lenovo ≫ Thinkpad T14s Gen 2 Version-

Lenovo ≫ Thinkpad T14s Gen 2 Firmware Version1.37

Lenovo ≫ Thinkpad T14s Gen 2 Version-

Lenovo ≫ Thinkpad T14s Gen 3 Firmware Version1.33

Lenovo ≫ Thinkpad T14s Gen 3 Version-

Lenovo ≫ Thinkpad T15 Firmware Version1.28

Lenovo ≫ Thinkpad T15 Version-

Lenovo ≫ Thinkpad T15 Gen 2 Firmware Version1.05

Lenovo ≫ Thinkpad T15 Gen 2 Version-

Lenovo ≫ Thinkpad T15 Gen 2 Firmware Version1.55

Lenovo ≫ Thinkpad T15 Gen 2 Version-

Lenovo ≫ Thinkpad T15g Gen 1 Firmware Version1.32

Lenovo ≫ Thinkpad T15g Gen 1 Version-

Lenovo ≫ Thinkpad T15g Gen 2 Firmware Version1.25

Lenovo ≫ Thinkpad T15g Gen 2 Version-

Lenovo ≫ Thinkpad T15p Gen 1 Firmware Version1.32

Lenovo ≫ Thinkpad T15p Gen 1 Version-

Lenovo ≫ Thinkpad T15p Gen 2 Firmware Version1.19

Lenovo ≫ Thinkpad T15p Gen 2 Version-

Lenovo ≫ Thinkpad T15p Gen 3 Firmware Version1.15

Lenovo ≫ Thinkpad T15p Gen 3 Version-

Lenovo ≫ Thinkpad T16 Gen 1 Firmware Version1.11

Lenovo ≫ Thinkpad T16 Gen 1 Version-

Lenovo ≫ Thinkpad T16 Gen 1 Firmware Version1.31

Lenovo ≫ Thinkpad T16 Gen 1 Version-

Lenovo ≫ Thinkpad T490 Firmware Version1.21

Lenovo ≫ Thinkpad T490 Version-

Lenovo ≫ Thinkpad T490 Firmware Version1.79

Lenovo ≫ Thinkpad T490 Version-

Lenovo ≫ Thinkpad T490 Firmware Version1.21

Lenovo ≫ Thinkpad T490 Version-

Lenovo ≫ Thinkpad T490 Firmware Version1.79

Lenovo ≫ Thinkpad T490 Version-

Lenovo ≫ Thinkpad T490 Firmware Version1.21

Lenovo ≫ Thinkpad T490 Version-

Lenovo ≫ Thinkpad T490 Firmware Version1.79

Lenovo ≫ Thinkpad T490 Version-

Lenovo ≫ Thinkpad T490s Firmware Version1.24

Lenovo ≫ Thinkpad T490s Version-

Lenovo ≫ Thinkpad T490s Firmware Version1.79

Lenovo ≫ Thinkpad T490s Version-

Lenovo ≫ Thinkpad T590 Firmware Version1.21

Lenovo ≫ Thinkpad T590 Version-

Lenovo ≫ Thinkpad T590 Firmware Version1.79

Lenovo ≫ Thinkpad T590 Version-

Lenovo ≫ Thinkpad Thinkpad R14 Gen 2 Firmware Version1.55

Lenovo ≫ Thinkpad Thinkpad R14 Gen 2 Version-

Lenovo ≫ Thinkpad Thinkpad R14 Gen 4 Firmware Version1.18

Lenovo ≫ Thinkpad Thinkpad R14 Gen 4 Version-

Lenovo ≫ Thinkpad Thinkpad S3 2nd Gen Firmware Version1.23

Lenovo ≫ Thinkpad Thinkpad S3 2nd Gen Version-

Lenovo ≫ Thinkpad X1 Carbon 10th Gen Firmware Version1.37

Lenovo ≫ Thinkpad X1 Carbon 10th Gen Version-

Lenovo ≫ Thinkpad X1 Carbon 7th Gen Firmware Version1.45

Lenovo ≫ Thinkpad X1 Carbon 7th Gen Version-

Lenovo ≫ Thinkpad X1 Carbon 7th Gen Firmware Version1.56

Lenovo ≫ Thinkpad X1 Carbon 7th Gen Version-

Lenovo ≫ Thinkpad X1 Carbon 7th Gen Firmware Version1.45

Lenovo ≫ Thinkpad X1 Carbon 7th Gen Version-

Lenovo ≫ Thinkpad X1 Carbon 7th Gen Firmware Version1.56

Lenovo ≫ Thinkpad X1 Carbon 7th Gen Version-

Lenovo ≫ Thinkpad X1 Carbon 8th Gen Firmware Version1.15

Lenovo ≫ Thinkpad X1 Carbon 8th Gen Version-

Lenovo ≫ Thinkpad X1 Carbon 8th Gen Firmware Version1.30

Lenovo ≫ Thinkpad X1 Carbon 8th Gen Version-

Lenovo ≫ Thinkpad X1 Carbon 9th Gen Firmware Version1.59

Lenovo ≫ Thinkpad X1 Carbon 9th Gen Version-

Lenovo ≫ Thinkpad X1 Extreme 2nd Gen Firmware Version1.46

Lenovo ≫ Thinkpad X1 Extreme 2nd Gen Version-

Lenovo ≫ Thinkpad X1 Extreme 3rd Gen Firmware Version1.27

Lenovo ≫ Thinkpad X1 Extreme 3rd Gen Version-

Lenovo ≫ Thinkpad X1 Extreme 4th Gen Firmware Version1.22

Lenovo ≫ Thinkpad X1 Extreme 4th Gen Version-

Lenovo ≫ Thinkpad X1 Extreme Gen 5 Firmware Version1.16

Lenovo ≫ Thinkpad X1 Extreme Gen 5 Version-

Lenovo ≫ Thinkpad X1 Nano Gen 1 Firmware Version1.55

Lenovo ≫ Thinkpad X1 Nano Gen 1 Version-

Lenovo ≫ Thinkpad X1 Nano Gen 2 Firmware Version1.18

Lenovo ≫ Thinkpad X1 Nano Gen 2 Version-

Lenovo ≫ Thinkpad X1 Titanium Firmware Version1.24

Lenovo ≫ Thinkpad X1 Titanium Version-

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Firmware Version1.45

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Version-

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Firmware Version1.56

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Version-

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Firmware Version1.45

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Version-

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Firmware Version1.56

Lenovo ≫ Thinkpad X1 Yoga 4th Gen Version-

Lenovo ≫ Thinkpad X1 Yoga 5th Gen Firmware Version1.15

Lenovo ≫ Thinkpad X1 Yoga 5th Gen Version-

Lenovo ≫ Thinkpad X1 Yoga 5th Gen Firmware Version1.30

Lenovo ≫ Thinkpad X1 Yoga 5th Gen Version-

Lenovo ≫ Thinkpad X1 Yoga 6th Gen Firmware Version1.59

Lenovo ≫ Thinkpad X1 Yoga 6th Gen Version-

Lenovo ≫ Thinkpad X1 Yoga 7th Gen Firmware Version1.37

Lenovo ≫ Thinkpad X1 Yoga 7th Gen Version-

Lenovo ≫ Thinkpad X12 Detachable Gen 1 Firmware Version1.28

Lenovo ≫ Thinkpad X12 Detachable Gen 1 Version-

Lenovo ≫ Thinkpad X13 Firmware Version1.26

Lenovo ≫ Thinkpad X13 Version-

Lenovo ≫ Thinkpad X13 Gen 2 Firmware Version1.51

Lenovo ≫ Thinkpad X13 Gen 2 Version-

Lenovo ≫ Thinkpad X13 Gen 2 Firmware Version1.37

Lenovo ≫ Thinkpad X13 Gen 2 Version-

Lenovo ≫ Thinkpad X13 Gen 3 Firmware Version1.33

Lenovo ≫ Thinkpad X13 Gen 3 Version-

Lenovo ≫ Thinkpad X13 Yoga Gen 1 Firmware Version1.45

Lenovo ≫ Thinkpad X13 Yoga Gen 1 Version-

Lenovo ≫ Thinkpad X13 Yoga Gen 2 Firmware Version1.4

Lenovo ≫ Thinkpad X13 Yoga Gen 2 Version-

Lenovo ≫ Thinkpad X13 Yoga Gen 3 Firmware Version1.09

Lenovo ≫ Thinkpad X13 Yoga Gen 3 Version-

Lenovo ≫ Thinkpad X390 Firmware Version1.79_1.24

Lenovo ≫ Thinkpad X390 Version-

Lenovo ≫ Thinkpad X390 Firmware Version1.24

Lenovo ≫ Thinkpad X390 Version-

Lenovo ≫ Thinkpad X390 Firmware Version1.79

Lenovo ≫ Thinkpad X390 Version-

Lenovo ≫ Thinkpad X390 Yoga Firmware Version1.95

Lenovo ≫ Thinkpad X390 Yoga Version-

Lenovo ≫ Thinkpad Z13 Gen 1 Firmware Version1.57

Lenovo ≫ Thinkpad Z13 Gen 1 Version-

Lenovo ≫ Thinkpad Z16 Gen 1 Firmware Version1.57

Lenovo ≫ Thinkpad Z16 Gen 1 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.091

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
psirt@lenovo.com	6.4	0.5	5.9	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://support.lenovo.com/us/en/product_security/LEN-106014

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-2290

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-2290

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-2290

EUVD