6.7

CVE-2023-45078

A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables. 
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Ideacentre C5-14imb05 Firmware Version < o4hkt3ca
   Lenovo ≫ Ideacentre C5-14imb05 Version -
Lenovo ≫ Ideacentre 3-07ada05 Firmware Version < o4fkt39a
   Lenovo ≫ Ideacentre 3-07ada05 Version -
Lenovo ≫ Ideacentre 3-07imb05 Firmware Version < m2vkt21a
   Lenovo ≫ Ideacentre 3-07imb05 Version -
Lenovo ≫ Ideacentre G5-14imb05 Firmware Version < o4hkt3ca
   Lenovo ≫ Ideacentre G5-14imb05 Version -
Lenovo ≫ Ideacentre 5-14iob6 Firmware Version < m3gkt3da
   Lenovo ≫ Ideacentre 5-14iob6 Version -
Lenovo ≫ Ideacentre G5-14amr05 Firmware Version < o4zkt2ba
   Lenovo ≫ Ideacentre G5-14amr05 Version -
Lenovo ≫ Ideacentre G5-14imb05 Firmware Version < o4hkt3ca
   Lenovo ≫ Ideacentre G5-14imb05 Version -
Lenovo ≫ Ideacentre Mini 5 01iaq7 Firmware Version < o53kt10a
   Lenovo ≫ Ideacentre Mini 5 01iaq7 Version -
Lenovo ≫ Legion T7-34imz5 Firmware Version < o5fkt17a
   Lenovo ≫ Legion T7-34imz5 Version -
Lenovo ≫ Thinkcentre M625q Firmware Version < m1wkt52a
   Lenovo ≫ Thinkcentre M625q Version -
Lenovo ≫ Thinkcentre M630e Firmware Version -
   Lenovo ≫ Thinkcentre M630e Version -
Lenovo ≫ Thinkcentre M70a Firmware Version < m2skt29a
   Lenovo ≫ Thinkcentre M70a Version -
Lenovo ≫ Thinkcentre M920x Firmware Version < m1ukt72a
   Lenovo ≫ Thinkcentre M920x Version -
Lenovo ≫ Thinkcentre M920t Firmware Version < m1ukt72a
   Lenovo ≫ Thinkcentre M920t Version -
Lenovo ≫ Thinkcentre M920s Firmware Version < m1ukt72a
   Lenovo ≫ Thinkcentre M920s Version -
Lenovo ≫ Thinkcentre M920q Firmware Version < m1ukt72a
   Lenovo ≫ Thinkcentre M920q Version -
Lenovo ≫ Thinkcentre M90t Firmware Version < m2tkt55a
   Lenovo ≫ Thinkcentre M90t Version -
Lenovo ≫ Thinkcentre M90s Firmware Version < m2tkt55a
   Lenovo ≫ Thinkcentre M90s Version -
Lenovo ≫ Thinkcentre M90q Tiny Firmware Version < m2wkt5aa
   Lenovo ≫ Thinkcentre M90q Tiny Version -
Lenovo ≫ Thinkcentre M90a Firmware Version < m2rkt57a
   Lenovo ≫ Thinkcentre M90a Version -
Lenovo ≫ Thinkcentre M80t Firmware Version < m2tkt55a
   Lenovo ≫ Thinkcentre M80t Version -
Lenovo ≫ Thinkcentre M80s Firmware Version < m2tkt55a
   Lenovo ≫ Thinkcentre M80s Version -
Lenovo ≫ Thinkcentre M80q Firmware Version < m2wkt5aa
   Lenovo ≫ Thinkcentre M80q Version -
Lenovo ≫ Thinkcentre M75q Gen 2 Firmware Version < m47kt30a
   Lenovo ≫ Thinkcentre M75q Gen 2 Version -
Lenovo ≫ Thinkcentre M75n Firmware Version < m33kt27a
   Lenovo ≫ Thinkcentre M75n Version -
Lenovo ≫ Thinkcentre M720t Firmware Version < m1ukt72a
   Lenovo ≫ Thinkcentre M720t Version -
Lenovo ≫ Thinkcentre M720s Firmware Version < m1ukt72a
   Lenovo ≫ Thinkcentre M720s Version -
Lenovo ≫ Thinkcentre M720q Firmware Version < m1ukt72a
   Lenovo ≫ Thinkcentre M720q Version -
Lenovo ≫ Thinkcentre M70t Firmware Version < m2tkt55a
   Lenovo ≫ Thinkcentre M70t Version -
Lenovo ≫ Thinkcentre M70s Firmware Version < m2tkt55a
   Lenovo ≫ Thinkcentre M70s Version -
Lenovo ≫ Thinkcentre M70q Firmware Version < m2wkt5aa
   Lenovo ≫ Thinkcentre M70q Version -
Lenovo ≫ Thinkcentre M70c Firmware Version < m2vkt21a
   Lenovo ≫ Thinkcentre M70c Version -
Lenovo ≫ V50t-13iob G2 Firmware Version < m3gkt3da
   Lenovo ≫ V50t-13iob G2 Version -
Lenovo ≫ V55t Gen 2 13acn Firmware Version < o5jkt23a
   Lenovo ≫ V55t Gen 2 13acn Version -
Lenovo ≫ V50t-13imh Firmware Version < m4pkt13a
   Lenovo ≫ V50t-13imh Version -
Lenovo ≫ V50t-13imb Firmware Version < o4hkt3ca
   Lenovo ≫ V50t-13imb Version -
Lenovo ≫ V50s-07imb Firmware Version < m2vkt21a
   Lenovo ≫ V50s-07imb Version -
Lenovo ≫ V50a-24imb Firmware Version < m36kt32a
   Lenovo ≫ V50a-24imb Version -
Lenovo ≫ V50a-22imb Firmware Version < m36kt32a
   Lenovo ≫ V50a-22imb Version -
Lenovo ≫ V30a-24iml Firmware Version < m37kt31a
   Lenovo ≫ V30a-24iml Version -
Lenovo ≫ V30a-22iml Firmware Version < m37kt31a
   Lenovo ≫ V30a-22iml Version -
Lenovo ≫ Thinkcentre M70c Firmware Version < m2vkt21a
   Lenovo ≫ Thinkcentre M70c Version -
Lenovo ≫ Thinkedge Se30 Firmware Version < m3fkt2da
   Lenovo ≫ Thinkedge Se30 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.22% 0.117
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lenovo 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

https://support.lenovo.com/us/en/product_security/LEN-141775
Vendor Advisory