CVE-2023-43572

Published: Nov 8, 2023Modified: Nov 21, 2024

4.4

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.8 / Impact: 3.6

Source: NVD

Description

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

Affected (113)

Lenovo

111 products

Ideacentre C5 14imb05 Firmware

Ideacentre 3 07ada05 Firmware

Ideacentre 3 07imb05 Firmware

Ideacentre 5 14iab7 Firmware

Ideacentre 5 14irb8 Firmware

Ideacentre 5 14acn6 Firmware

Ideacentre T540 15ama G Firmware

Thinkcentre Neo 70t Gen 3 Firmware

Thinkcentre Neo 50t Gen 3 Firmware

Thinkcentre Neo 50a 24 Gen 4 Firmware

Thinkcentre Neo 50a 24 Gen 3 Firmware

Thinkcentre Neo 30a 27 Gen 4 Firmware

Thinkcentre Neo 30a 27 Gen 3 Firmware

Thinkcentre Neo 30a 24 Gen 4 Firmware

Thinkcentre Neo 30a 24 Gen 3 Firmware

Thinkcentre Neo 30a 22 Gen 4 Firmware

Thinkcentre Neo 30a 22 Gen 3 Firmware

Thinkcentre M920z All In One Firmware

Thinkcentre M90t Gen 3 Firmware

Thinkcentre M90t Firmware

Thinkcentre M90s Gen 3 Firmware

Thinkcentre M90s Firmware

Thinkcentre M90q Tiny Firmware

Thinkcentre M90q Gen 3 Firmware

Thinkcentre M90q Gen 2 Firmware

Thinkcentre M90a Pro Gen 3 Firmware

Thinkcentre M90a Gen 3 Firmware

Thinkcentre M90a Gen 2 Firmware

Thinkcentre M90a Firmware

Thinkcentre M80t Gen 3 Firmware

Thinkcentre M80t Firmware

Thinkcentre M80s Gen 3 Firmware

Thinkcentre M80s Firmware

Thinkcentre M80q Gen 3 Firmware

Thinkcentre M80q Firmware

Thinkcentre M75t Gen 2 Firmware

Thinkcentre M75s Gen 2 Firmware

Thinkcentre M75q Gen 2 Firmware

Thinkcentre M75n Firmware

Thinkcentre M70t Gen 3 Firmware

Thinkcentre M70t Firmware

Thinkcentre M70s Gen 3 Firmware

Thinkcentre M70s Firmware

Thinkcentre M70q Gen 2 Firmware

Thinkcentre M70q Firmware

Thinkcentre M70c Firmware

Thinkcentre M70a Gen 3 Firmware

Thinkcentre M630e Firmware

Thinkcentre M625q Firmware

Loq 17irb8 Firmware

Legion T5 26iab7 Firmware

Legion T7 34imz5 Firmware

Legion T7 34iaz7 Firmware

Legion T7 34irz8 Firmware

Legion T5 26irb8 Firmware

Ideacentre Mini 5 01imh05 Firmware

Ideacentre Mini 5 01iaq7 Firmware

Ideacentre Gaming 5 14iob6 Firmware

Ideacentre Gaming 5 14acn6 Firmware

Ideacentre Gaming 5 17iab7 Firmware

Ideacentre Gaming 5 17acn7 Firmware

Ideacentre G5 14imb05 Firmware

Ideacentre G5 14amr05 Firmware

Ideacentre Creator 5 14iob6 Firmware

Ideacentre Aio 5 27iah7 Firmware

Ideacentre Aio 5 24iah7 Firmware

Ideacentre Aio 3 27itl6 Firmware

Ideacentre Aio 3 27imb05 Firmware

Ideacentre Aio 3 24itl6 Firmware

Ideacentre Aio 3 24imb05 Firmware

Ideacentre Aio 3 24iil5 Firmware

Ideacentre Aio 3 24alc6 Firmware

Ideacentre Aio 3 22itl6 Firmware

Ideacentre Aio 3 22imb05 Firmware

Ideacentre Aio 3 22iil5 Firmware

Ideacentre Aio 3 27iap7 Firmware

Ideacentre Aio 3 24iap7 Firmware

Ideacentre Aio 3 22iap7 Firmware

Ideacentre Aio 3 21itl7 Firmware

Ideacentre 5 14iob6 Firmware

Ideacentre 5 14imb05 Firmware

V55t Gen 2 13acn Firmware

Yoga Aio 7 27arh7 Firmware

Yoga Aio 7 27arh6 Firmware

Thinkedge Se30 Firmware

Thinkstation P920 Workstation Firmware

Thinkstation P720 Workstation Firmware

Thinkstation P520c Workstation Firmware

Thinkstation P520 Workstation Firmware

Thinkstation P360 Workstation Firmware

Thinkstation P360 Ultra Workstation Firmware

Thinkstation P360 Tiny Workstation Firmware

Thinkstation P358 Workstation Firmware

Thinkstation P350 Workstation Firmware

Thinkstation P350 Tiny Workstation Firmware

Thinkstation P348 Workstation Firmware

Thinkstation P340 Workstation Firmware

Thinkstation P340 Tiny Workstation Firmware

Thinkstation P330 Workstation 2nd Gen Firmware

Thinkstation P330 Workstation Firmware

Thinkstation P320 Workstation Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre C5 14imb05 Firmware	Before o4hkt3ca

Running on/with	Platform Versions
Lenovo Ideacentre C5 14imb05	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 3 07ada05 Firmware	Before o4fkt39a

Running on/with	Platform Versions
Lenovo Ideacentre 3 07ada05	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 3 07imb05 Firmware	Before m2vkt21a

Running on/with	Platform Versions
Lenovo Ideacentre 3 07imb05	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14iab7 Firmware	Before m42kt46a

Running on/with	Platform Versions
Lenovo Ideacentre 5 14iab7	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14irb8 Firmware	Before m4ukt36a

Running on/with	Platform Versions
Lenovo Ideacentre 5 14irb8	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14acn6 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideacentre 5 14acn6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre T540 15ama G Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideacentre T540 15ama G	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 70t Gen 3 Firmware	Before m40kt45a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 70t Gen 3	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 50t Gen 3 Firmware	Before m42kt46a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 50t Gen 3	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 50a 24 Gen 4 Firmware	Before o5xkt18a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 50a 24 Gen 4	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 50a 24 Gen 3 Firmware	Before o5rkt41a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 50a 24 Gen 3	All versions

Configuration L

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 30a 27 Gen 4 Firmware	Before o5nkt33a
Lenovo Thinkcentre Neo 30a 27 Gen 4 Firmware	Version o5nkt33a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 30a 27 Gen 4	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 30a 27 Gen 3 Firmware	Before o5nkt33a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 30a 27 Gen 3	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 30a 24 Gen 4 Firmware	Before o5nkt33a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 30a 24 Gen 4	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 30a 24 Gen 3 Firmware	Before o5nkt33a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 30a 24 Gen 3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 30a 22 Gen 4 Firmware	Before o5nkt33a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 30a 22 Gen 4	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre Neo 30a 22 Gen 3 Firmware	Before o5nkt33a

Running on/with	Platform Versions
Lenovo Thinkcentre Neo 30a 22 Gen 3	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920z All In One Firmware	Before m1mkt56a

Running on/with	Platform Versions
Lenovo Thinkcentre M920z All In One	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90t Gen 3 Firmware	Before m40kt45a

Running on/with	Platform Versions
Lenovo Thinkcentre M90t Gen 3	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90t Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M90t	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90s Gen 3 Firmware	Before m40kt45a

Running on/with	Platform Versions
Lenovo Thinkcentre M90s Gen 3	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90s Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M90s	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90q Tiny Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M90q Tiny	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90q Gen 3 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M90q Gen 3	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90q Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M90q Gen 2	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90a Pro Gen 3 Firmware	Before m4hkt1da

Running on/with	Platform Versions
Lenovo Thinkcentre M90a Pro Gen 3	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90a Gen 3 Firmware	Before m4ikt1da

Running on/with	Platform Versions
Lenovo Thinkcentre M90a Gen 3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90a Gen 2 Firmware	Before m3lkt2aa

Running on/with	Platform Versions
Lenovo Thinkcentre M90a Gen 2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90a Firmware	Before m2rkt57a

Running on/with	Platform Versions
Lenovo Thinkcentre M90a	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80t Gen 3 Firmware	Before m40kt45a

Running on/with	Platform Versions
Lenovo Thinkcentre M80t Gen 3	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80t Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M80t	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80s Gen 3 Firmware	Before m40kt45a

Running on/with	Platform Versions
Lenovo Thinkcentre M80s Gen 3	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80s Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M80s	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80q Gen 3 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M80q Gen 3	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80q Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M80q	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75t Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M75t Gen 2	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75s Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M75s Gen 2	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75q Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M75q Gen 2	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75n Firmware	Before m33kt29a

Running on/with	Platform Versions
Lenovo Thinkcentre M75n	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70t Gen 3 Firmware	Before m41kt45a

Running on/with	Platform Versions
Lenovo Thinkcentre M70t Gen 3	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70t Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M70t	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70s Gen 3 Firmware	Before m41kt45a

Running on/with	Platform Versions
Lenovo Thinkcentre M70s Gen 3	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70s Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M70s	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70q Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M70q Gen 2	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70q Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M70q	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70c Firmware	Before m2vkt21a

Running on/with	Platform Versions
Lenovo Thinkcentre M70c	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70a Gen 3 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M70a Gen 3	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M630e Firmware	Before m28kt42a

Running on/with	Platform Versions
Lenovo Thinkcentre M630e	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M625q Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M625q	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Loq 17irb8 Firmware	Before m4ukt36a

Running on/with	Platform Versions
Lenovo Loq 17irb8	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T5 26iab7 Firmware	Before o5lkt2ba

Running on/with	Platform Versions
Lenovo Legion T5 26iab7	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T7 34imz5 Firmware	Before o5fkt17a

Running on/with	Platform Versions
Lenovo Legion T7 34imz5	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T7 34iaz7 Firmware	Before o5hkt2ca

Running on/with	Platform Versions
Lenovo Legion T7 34iaz7	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T7 34irz8 Firmware	Before o5ukt1fa

Running on/with	Platform Versions
Lenovo Legion T7 34irz8	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T5 26irb8 Firmware	Before o5tkt1ca

Running on/with	Platform Versions
Lenovo Legion T5 26irb8	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Mini 5 01imh05 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideacentre Mini 5 01imh05	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Mini 5 01iaq7 Firmware	Before o53kt10a

Running on/with	Platform Versions
Lenovo Ideacentre Mini 5 01iaq7	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Gaming 5 14iob6 Firmware	Before m3gkt3da

Running on/with	Platform Versions
Lenovo Ideacentre Gaming 5 14iob6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Gaming 5 14acn6 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideacentre Gaming 5 14acn6	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Gaming 5 17iab7 Firmware	Before m42kt46a

Running on/with	Platform Versions
Lenovo Ideacentre Gaming 5 17iab7	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Gaming 5 17acn7 Firmware	All versions

Running on/with	Platform Versions
Lenovo Ideacentre Gaming 5 17acn7	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre G5 14imb05 Firmware	Before o4hkt3ca

Running on/with	Platform Versions
Lenovo Ideacentre G5 14imb05	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre G5 14amr05 Firmware	Before o4zkt2ba

Running on/with	Platform Versions
Lenovo Ideacentre G5 14amr05	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Creator 5 14iob6 Firmware	Before m3gkt3da

Running on/with	Platform Versions
Lenovo Ideacentre Creator 5 14iob6	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 5 27iah7 Firmware	Before o5rkt41a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 5 27iah7	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 5 24iah7 Firmware	Before o5rkt41a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 5 24iah7	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 27itl6 Firmware	Before o5akt34a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 27itl6	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 27imb05 Firmware	Before o4rkt31a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 27imb05	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 24itl6 Firmware	Before o5akt34a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 24itl6	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 24imb05 Firmware	Before o4rkt31a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 24imb05	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 24iil5 Firmware	Before o56kt24a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 24iil5	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 24alc6 Firmware	Before o5bkt25a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 24alc6	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 22itl6 Firmware	Before o5akt34a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 22itl6	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 22imb05 Firmware	Before o4rkt31a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 22imb05	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 22iil5 Firmware	Before o56kt24a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 22iil5	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 27iap7 Firmware	Before o5nkt33a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 27iap7	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 24iap7 Firmware	Before o5nkt33a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 24iap7	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 22iap7 Firmware	Before o5nkt33a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 22iap7	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Aio 3 21itl7 Firmware	Before o5akt34a

Running on/with	Platform Versions
Lenovo Ideacentre Aio 3 21itl7	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14iob6 Firmware	Before m3gkt3da

Running on/with	Platform Versions
Lenovo Ideacentre 5 14iob6	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14imb05 Firmware	Before o4hkt3ca

Running on/with	Platform Versions
Lenovo Ideacentre 5 14imb05	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V30a 22iml Firmware	Before m37kt31a

Running on/with	Platform Versions
Lenovo V30a 22iml	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V30a 22itl Firmware	Before o5akt34a

Running on/with	Platform Versions
Lenovo V30a 22itl	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V30a 24iml Firmware	Before m37kt31a

Running on/with	Platform Versions
Lenovo V30a 24iml	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V30a 24itl Firmware	Before o5akt34a

Running on/with	Platform Versions
Lenovo V30a 24itl	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50a 22imb Firmware	Before m36kt32a

Running on/with	Platform Versions
Lenovo V50a 22imb	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50a 24imb Firmware	Before m36kt32a

Running on/with	Platform Versions
Lenovo V50a 24imb	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50s 07imb Firmware	Before m2vkt21a

Running on/with	Platform Versions
Lenovo V50s 07imb	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50t 13imb Firmware	Before o4hkt3ca

Running on/with	Platform Versions
Lenovo V50t 13imb	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50t 13imh Firmware	Before m4pkt16a

Running on/with	Platform Versions
Lenovo V50t 13imh	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50t 13iob Firmware	Before m3gkt3da

Running on/with	Platform Versions
Lenovo V50t 13iob	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V55t Gen 2 13acn Firmware	Before o5jkt2ca

Running on/with	Platform Versions
Lenovo V55t Gen 2 13acn	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Yoga Aio 7 27arh7 Firmware	All versions

Running on/with	Platform Versions
Lenovo Yoga Aio 7 27arh7	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Yoga Aio 7 27arh6 Firmware	All versions

Running on/with	Platform Versions
Lenovo Yoga Aio 7 27arh6	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkedge Se30 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkedge Se30	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P920 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P920 Workstation	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P720 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P720 Workstation	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P520c Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P520c Workstation	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P520 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P520 Workstation	All versions

Configuration V

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkstation P360 Workstation Firmware	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P360 Workstation Firmware	Before s0ekt45a

Running on/with	Platform Versions
Lenovo Thinkstation P360 Workstation	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P360 Ultra Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P360 Ultra Workstation	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P360 Tiny Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P360 Tiny Workstation	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P358 Workstation Firmware	Before s0hkt23a

Running on/with	Platform Versions
Lenovo Thinkstation P358 Workstation	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P350 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P350 Workstation	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P350 Tiny Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P350 Tiny Workstation	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P348 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P348 Workstation	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P340 Workstation Firmware	Before s08kt55a

Running on/with	Platform Versions
Lenovo Thinkstation P340 Workstation	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P340 Tiny Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P340 Tiny Workstation	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P330 Workstation 2nd Gen Firmware	Before m1vkt73a

Running on/with	Platform Versions
Lenovo Thinkstation P330 Workstation 2nd Gen	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P330 Workstation Firmware	Before m1vkt73a

Running on/with	Platform Versions
Lenovo Thinkstation P330 Workstation	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P320 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P320 Workstation	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

CWE-126

Buffer Over-read

The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-141775

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-141775

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.