CVE-2023-2290

Published: Jun 26, 2023Modified: Jun 17, 2026

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected (116)

Lenovo

85 products

Thinkpad E14 Firmware

Thinkpad E14 Gen 2 Firmware

Thinkpad E14 Gen 4 Firmware

Thinkpad E15 Firmware

Thinkpad E15 Gen 2 Firmware

Thinkpad E15 Gen 4 Firmware

Thinkpad E490 Firmware

Thinkpad E490s Firmware

Thinkpad E590 Firmware

Thinkpad L13 Gen 3 Firmware

Thinkpad L13 Yoga Gen 3 Firmware

Thinkpad L14 Firmware

Thinkpad L15 Firmware

Thinkpad L15 Gen 2 Firmware

Thinkpad L15 Gen 3 Firmware

Thinkpad L490 Firmware

Thinkpad L590 Firmware

Thinkpad P1 Gen 2 Firmware

Thinkpad P1 Gen 3 Firmware

Thinkpad P1 Gen 4 Firmware

Thinkpad P1 Gen 5 Firmware

Thinkpad P14s Gen 1 Firmware

Thinkpad P14s Gen 2 Firmware

Thinkpad P14s Gen 3 Firmware

Thinkpad P15 Gen 1 Firmware

Thinkpad P15 Gen 2 Firmware

Thinkpad P15s Gen 1 Firmware

Thinkpad P15s Gen 2 Firmware

Thinkpad P15v Gen 1 Firmware

Thinkpad P15v Gen 2 Firmware

Thinkpad P15v Gen 3 Firmware

Thinkpad P16 Gen 1 Firmware

Thinkpad P16s Gen 1 Firmware

Thinkpad P17 Gen 1 Firmware

Thinkpad P17 Gen 2 Firmware

Thinkpad P43s Firmware

Thinkpad P53 Firmware

Thinkpad P53s Firmware

Thinkpad P73 Firmware

Thinkpad T14 Gen 1 Firmware

Thinkpad T14 Gen 2 Firmware

Thinkpad T14 Gen 3 Firmware

Thinkpad T14s Firmware

Thinkpad T14s Gen 2 Firmware

Thinkpad T14s Gen 3 Firmware

Thinkpad T15 Firmware

Thinkpad T15 Gen 2 Firmware

Thinkpad T15g Gen 1 Firmware

Thinkpad T15g Gen 2 Firmware

Thinkpad T15p Gen 1 Firmware

Thinkpad T15p Gen 2 Firmware

Thinkpad T15p Gen 3 Firmware

Thinkpad T16 Gen 1 Firmware

Thinkpad T490 Firmware

Thinkpad T490s Firmware

Thinkpad T590 Firmware

Thinkpad Thinkpad R14 Gen 2 Firmware

Thinkpad Thinkpad R14 Gen 4 Firmware

Thinkpad Thinkpad S3 2nd Gen Firmware

Thinkpad X1 Carbon 10th Gen Firmware

Thinkpad X1 Carbon 7th Gen Firmware

Thinkpad X1 Carbon 8th Gen Firmware

Thinkpad X1 Carbon 9th Gen Firmware

Thinkpad X1 Extreme 2nd Gen Firmware

Thinkpad X1 Extreme 3rd Gen Firmware

Thinkpad X1 Extreme 4th Gen Firmware

Thinkpad X1 Extreme Gen 5 Firmware

Thinkpad X1 Nano Gen 1 Firmware

Thinkpad X1 Nano Gen 2 Firmware

Thinkpad X1 Titanium Firmware

Thinkpad X1 Yoga 4th Gen Firmware

Thinkpad X1 Yoga 5th Gen Firmware

Thinkpad X1 Yoga 6th Gen Firmware

Thinkpad X1 Yoga 7th Gen Firmware

Thinkpad X12 Detachable Gen 1 Firmware

Thinkpad X13 Firmware

Thinkpad X13 Gen 2 Firmware

Thinkpad X13 Gen 3 Firmware

Thinkpad X13 Yoga Gen 1 Firmware

Thinkpad X13 Yoga Gen 2 Firmware

Thinkpad X13 Yoga Gen 3 Firmware

Thinkpad X390 Firmware

Thinkpad X390 Yoga Firmware

Thinkpad Z13 Gen 1 Firmware

Thinkpad Z16 Gen 1 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E14 Firmware	Version 1.23

Running on/with	Platform Versions
Lenovo Thinkpad E14	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E14 Gen 2 Firmware	Version 1.55

Running on/with	Platform Versions
Lenovo Thinkpad E14 Gen 2	All versions

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad E14 Gen 4 Firmware	Version 1.18

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E14 Gen 4 Firmware	Version 1.16

Running on/with	Platform Versions
Lenovo Thinkpad E14 Gen 4	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E15 Firmware	Version 1.23

Running on/with	Platform Versions
Lenovo Thinkpad E15	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E15 Gen 2 Firmware	Version 1.55

Running on/with	Platform Versions
Lenovo Thinkpad E15 Gen 2	All versions

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad E15 Gen 4 Firmware	Version 1.18

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E15 Gen 4 Firmware	Version 1.16

Running on/with	Platform Versions
Lenovo Thinkpad E15 Gen 4	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E490 Firmware	Version 1.34

Running on/with	Platform Versions
Lenovo Thinkpad E490	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E490s Firmware	Version 1.34

Running on/with	Platform Versions
Lenovo Thinkpad E490s	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad E590 Firmware	Version 1.34

Running on/with	Platform Versions
Lenovo Thinkpad E590	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L13 Gen 3 Firmware	Version 1.14

Running on/with	Platform Versions
Lenovo Thinkpad L13 Gen 3	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L13 Yoga Gen 3 Firmware	Version 1.14

Running on/with	Platform Versions
Lenovo Thinkpad L13 Yoga Gen 3	All versions

Configuration N

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad L14 Firmware	Version 1.2

Configuration O

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad L14 Firmware	Version 1.3

Configuration P

2 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad L14 Firmware	Version 1.48
Lenovo Thinkpad L14 Firmware	Version 1.61

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L14 Firmware	Version 1.26

Running on/with	Platform Versions
Lenovo Thinkpad L14	All versions

Configuration R

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad L15 Firmware	Version 1.2

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L15 Firmware	Version 1.3

Running on/with	Platform Versions
Lenovo Thinkpad L15	All versions

Configuration T

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L15 Gen 2 Firmware	Version 1.48
Lenovo Thinkpad L15 Gen 2 Firmware	Version 1.61

Running on/with	Platform Versions
Lenovo Thinkpad L15 Gen 2	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L15 Gen 3 Firmware	Version 1.26

Running on/with	Platform Versions
Lenovo Thinkpad L15 Gen 3	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L490 Firmware	Version 1.32

Running on/with	Platform Versions
Lenovo Thinkpad L490	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad L590 Firmware	Version 1.32

Running on/with	Platform Versions
Lenovo Thinkpad L590	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P1 Gen 2 Firmware	Version 1.46

Running on/with	Platform Versions
Lenovo Thinkpad P1 Gen 2	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P1 Gen 3 Firmware	Version 1.27

Running on/with	Platform Versions
Lenovo Thinkpad P1 Gen 3	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P1 Gen 4 Firmware	Version 1.22

Running on/with	Platform Versions
Lenovo Thinkpad P1 Gen 4	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P1 Gen 5 Firmware	Version 1.16

Running on/with	Platform Versions
Lenovo Thinkpad P1 Gen 5	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P14s Gen 1 Firmware	Version 1.28

Running on/with	Platform Versions
Lenovo Thinkpad P14s Gen 1	All versions

Configuration C

2 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad P14s Gen 2 Firmware	Version 1.05
Lenovo Thinkpad P14s Gen 2 Firmware	Version 1.55

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P14s Gen 2 Firmware	Version 1.34

Running on/with	Platform Versions
Lenovo Thinkpad P14s Gen 2	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P14s Gen 3 Firmware	Version 1.11
Lenovo Thinkpad P14s Gen 3 Firmware	Version 1.31

Running on/with	Platform Versions
Lenovo Thinkpad P14s Gen 3	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15 Gen 1 Firmware	Version 1.32

Running on/with	Platform Versions
Lenovo Thinkpad P15 Gen 1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15 Gen 2 Firmware	Version 1.25

Running on/with	Platform Versions
Lenovo Thinkpad P15 Gen 2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15s Gen 1 Firmware	Version 1.28

Running on/with	Platform Versions
Lenovo Thinkpad P15s Gen 1	All versions

Configuration I

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15s Gen 2 Firmware	Version 1.05
Lenovo Thinkpad P15s Gen 2 Firmware	Version 1.55

Running on/with	Platform Versions
Lenovo Thinkpad P15s Gen 2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15v Gen 1 Firmware	Version 1.32

Running on/with	Platform Versions
Lenovo Thinkpad P15v Gen 1	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15v Gen 2 Firmware	Version 1.19

Running on/with	Platform Versions
Lenovo Thinkpad P15v Gen 2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P15v Gen 3 Firmware	Version 1.15

Running on/with	Platform Versions
Lenovo Thinkpad P15v Gen 3	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P16 Gen 1 Firmware	Version 1.17

Running on/with	Platform Versions
Lenovo Thinkpad P16 Gen 1	All versions

Configuration N

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P16s Gen 1 Firmware	Version 1.11
Lenovo Thinkpad P16s Gen 1 Firmware	Version 1.31

Running on/with	Platform Versions
Lenovo Thinkpad P16s Gen 1	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P17 Gen 1 Firmware	Version 1.32

Running on/with	Platform Versions
Lenovo Thinkpad P17 Gen 1	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P17 Gen 2 Firmware	Version 1.25

Running on/with	Platform Versions
Lenovo Thinkpad P17 Gen 2	All versions

Configuration Q

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P43s Firmware	Version 1.21
Lenovo Thinkpad P43s Firmware	Version 1.79

Running on/with	Platform Versions
Lenovo Thinkpad P43s	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P53 Firmware	Version 1.4

Running on/with	Platform Versions
Lenovo Thinkpad P53	All versions

Configuration S

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P53s Firmware	Version 1.21
Lenovo Thinkpad P53s Firmware	Version 1.79

Running on/with	Platform Versions
Lenovo Thinkpad P53s	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad P73 Firmware	Version 1.4

Running on/with	Platform Versions
Lenovo Thinkpad P73	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14 Gen 1 Firmware	Version 1.28

Running on/with	Platform Versions
Lenovo Thinkpad T14 Gen 1	All versions

Configuration W

2 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14 Gen 2 Firmware	Version 1.05
Lenovo Thinkpad T14 Gen 2 Firmware	Version 1.55

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14 Gen 2 Firmware	Version 1.34

Running on/with	Platform Versions
Lenovo Thinkpad T14 Gen 2	All versions

Configuration Y

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14 Gen 3 Firmware	Version 1.11
Lenovo Thinkpad T14 Gen 3 Firmware	Version 1.31

Running on/with	Platform Versions
Lenovo Thinkpad T14 Gen 3	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14s Firmware	Version 1.26

Running on/with	Platform Versions
Lenovo Thinkpad T14s	All versions

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14s Gen 2 Firmware	Version 1.51

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14s Gen 2 Firmware	Version 1.37

Running on/with	Platform Versions
Lenovo Thinkpad T14s Gen 2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T14s Gen 3 Firmware	Version 1.33

Running on/with	Platform Versions
Lenovo Thinkpad T14s Gen 3	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15 Firmware	Version 1.28

Running on/with	Platform Versions
Lenovo Thinkpad T15	All versions

Configuration E

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15 Gen 2 Firmware	Version 1.05
Lenovo Thinkpad T15 Gen 2 Firmware	Version 1.55

Running on/with	Platform Versions
Lenovo Thinkpad T15 Gen 2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15g Gen 1 Firmware	Version 1.32

Running on/with	Platform Versions
Lenovo Thinkpad T15g Gen 1	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15g Gen 2 Firmware	Version 1.25

Running on/with	Platform Versions
Lenovo Thinkpad T15g Gen 2	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15p Gen 1 Firmware	Version 1.32

Running on/with	Platform Versions
Lenovo Thinkpad T15p Gen 1	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15p Gen 2 Firmware	Version 1.19

Running on/with	Platform Versions
Lenovo Thinkpad T15p Gen 2	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T15p Gen 3 Firmware	Version 1.15

Running on/with	Platform Versions
Lenovo Thinkpad T15p Gen 3	All versions

Configuration K

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T16 Gen 1 Firmware	Version 1.11
Lenovo Thinkpad T16 Gen 1 Firmware	Version 1.31

Running on/with	Platform Versions
Lenovo Thinkpad T16 Gen 1	All versions

Configuration N

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T490 Firmware	Version 1.21
Lenovo Thinkpad T490 Firmware	Version 1.79

Running on/with	Platform Versions
Lenovo Thinkpad T490	All versions

Configuration O

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T490s Firmware	Version 1.24
Lenovo Thinkpad T490s Firmware	Version 1.79

Running on/with	Platform Versions
Lenovo Thinkpad T490s	All versions

Configuration P

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad T590 Firmware	Version 1.21
Lenovo Thinkpad T590 Firmware	Version 1.79

Running on/with	Platform Versions
Lenovo Thinkpad T590	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad Thinkpad R14 Gen 2 Firmware	Version 1.55

Running on/with	Platform Versions
Lenovo Thinkpad Thinkpad R14 Gen 2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad Thinkpad R14 Gen 4 Firmware	Version 1.18

Running on/with	Platform Versions
Lenovo Thinkpad Thinkpad R14 Gen 4	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad Thinkpad S3 2nd Gen Firmware	Version 1.23

Running on/with	Platform Versions
Lenovo Thinkpad Thinkpad S3 2nd Gen	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon 10th Gen Firmware	Version 1.37

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon 10th Gen	All versions

Configuration V

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon 7th Gen Firmware	Version 1.45
Lenovo Thinkpad X1 Carbon 7th Gen Firmware	Version 1.56

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon 7th Gen	All versions

Configuration W

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon 8th Gen Firmware	Version 1.15
Lenovo Thinkpad X1 Carbon 8th Gen Firmware	Version 1.30

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon 8th Gen	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Carbon 9th Gen Firmware	Version 1.59

Running on/with	Platform Versions
Lenovo Thinkpad X1 Carbon 9th Gen	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Extreme 2nd Gen Firmware	Version 1.46

Running on/with	Platform Versions
Lenovo Thinkpad X1 Extreme 2nd Gen	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Extreme 3rd Gen Firmware	Version 1.27

Running on/with	Platform Versions
Lenovo Thinkpad X1 Extreme 3rd Gen	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Extreme 4th Gen Firmware	Version 1.22

Running on/with	Platform Versions
Lenovo Thinkpad X1 Extreme 4th Gen	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Extreme Gen 5 Firmware	Version 1.16

Running on/with	Platform Versions
Lenovo Thinkpad X1 Extreme Gen 5	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Nano Gen 1 Firmware	Version 1.55

Running on/with	Platform Versions
Lenovo Thinkpad X1 Nano Gen 1	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Nano Gen 2 Firmware	Version 1.18

Running on/with	Platform Versions
Lenovo Thinkpad X1 Nano Gen 2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Titanium Firmware	Version 1.24

Running on/with	Platform Versions
Lenovo Thinkpad X1 Titanium	All versions

Configuration G

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga 4th Gen Firmware	Version 1.45
Lenovo Thinkpad X1 Yoga 4th Gen Firmware	Version 1.56

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga 4th Gen	All versions

Configuration H

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga 5th Gen Firmware	Version 1.15
Lenovo Thinkpad X1 Yoga 5th Gen Firmware	Version 1.30

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga 5th Gen	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga 6th Gen Firmware	Version 1.59

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga 6th Gen	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X1 Yoga 7th Gen Firmware	Version 1.37

Running on/with	Platform Versions
Lenovo Thinkpad X1 Yoga 7th Gen	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X12 Detachable Gen 1 Firmware	Version 1.28

Running on/with	Platform Versions
Lenovo Thinkpad X12 Detachable Gen 1	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Firmware	Version 1.26

Running on/with	Platform Versions
Lenovo Thinkpad X13	All versions

Configuration M

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Gen 2 Firmware	Version 1.51

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Gen 2 Firmware	Version 1.37

Running on/with	Platform Versions
Lenovo Thinkpad X13 Gen 2	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Gen 3 Firmware	Version 1.33

Running on/with	Platform Versions
Lenovo Thinkpad X13 Gen 3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Yoga Gen 1 Firmware	Version 1.45

Running on/with	Platform Versions
Lenovo Thinkpad X13 Yoga Gen 1	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Yoga Gen 2 Firmware	Version 1.4

Running on/with	Platform Versions
Lenovo Thinkpad X13 Yoga Gen 2	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X13 Yoga Gen 3 Firmware	Version 1.09

Running on/with	Platform Versions
Lenovo Thinkpad X13 Yoga Gen 3	All versions

Configuration S

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkpad X390 Firmware	Version 1.79_1.24

Configuration T

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X390 Firmware	Version 1.24
Lenovo Thinkpad X390 Firmware	Version 1.79

Running on/with	Platform Versions
Lenovo Thinkpad X390	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad X390 Yoga Firmware	Version 1.95

Running on/with	Platform Versions
Lenovo Thinkpad X390 Yoga	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad Z13 Gen 1 Firmware	Version 1.57

Running on/with	Platform Versions
Lenovo Thinkpad Z13 Gen 1	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkpad Z16 Gen 1 Firmware	Version 1.57

Running on/with	Platform Versions
Lenovo Thinkpad Z16 Gen 1	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-106014

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-106014

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.