CVE-2023-45079

Published: Nov 8, 2023Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

Affected (62)

Lenovo

61 products

Ideacentre C5 14imb05 Firmware

Ideacentre 3 07ada05 Firmware

Ideacentre 3 07imb05 Firmware

Ideacentre 5 14iob6 Firmware

Ideacentre Creator 5 14iob6 Firmware

Ideacentre G5 14amr05 Firmware

Ideacentre G5 14imb05 Firmware

Ideacentre Gaming 5 14iob6 Firmware

Ideacentre Mini 5 01iaq7 Firmware

Ideacentre Mini 5 01imh05 Firmware

Legion T7 34imz5 Firmware

Thinkcentre M625q Firmware

Thinkcentre M630e Firmware

Thinkcentre M70a Firmware

Thinkcentre M920z All In One Firmware

Thinkcentre M920x Firmware

Thinkcentre M920t Firmware

Thinkcentre M920s Firmware

Thinkcentre M920q Firmware

Thinkcentre M90t Firmware

Thinkcentre M90s Firmware

Thinkcentre M90q Tiny Firmware

Thinkcentre M90a Firmware

Thinkcentre M820z All In One Firmware

Thinkcentre M80t Firmware

Thinkcentre M80s Firmware

Thinkcentre M80q Firmware

Thinkcentre M75t Gen 2 Firmware

Thinkcentre M75s Gen 2 Firmware

Thinkcentre M75q Gen 2 Firmware

Thinkcentre M75n Firmware

Thinkcentre M720t Firmware

Thinkcentre M720s Firmware

Thinkcentre M720q Firmware

Thinkcentre M70t Firmware

Thinkcentre M70s Firmware

Thinkcentre M70q Firmware

V50t 13iob G2 Firmware

V55t Gen 2 13acn Firmware

Thinkcentre M70c Firmware

Thinkedge Se30 Firmware

Thinkstation P920 Workstation Firmware

Thinkstation P720 Workstation Firmware

Thinkstation P520c Workstation Firmware

Thinkstation P520 Workstation Firmware

Thinkstation P360 Workstation Firmware

Thinkstation P350 Workstation Firmware

Thinkstation P348 Workstation Firmware

Thinkstation P340 Workstation Firmware

Thinkstation P340 Tiny Workstation Firmware

Thinkstation P330 Workstation 2nd Gen Firmware

Thinkstation P330 Workstation Firmware

Thinkstation P330 Tiny Workstation Firmware

Thinkstation P320 Workstation Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre C5 14imb05 Firmware	Before o4hkt3ca

Running on/with	Platform Versions
Lenovo Ideacentre C5 14imb05	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 3 07ada05 Firmware	Before o4fkt39a

Running on/with	Platform Versions
Lenovo Ideacentre 3 07ada05	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 3 07imb05 Firmware	Before m2vkt21a

Running on/with	Platform Versions
Lenovo Ideacentre 3 07imb05	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre 5 14iob6 Firmware	Before m3gkt3da

Running on/with	Platform Versions
Lenovo Ideacentre 5 14iob6	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Creator 5 14iob6 Firmware	Before m3gkt3da

Running on/with	Platform Versions
Lenovo Ideacentre Creator 5 14iob6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre G5 14amr05 Firmware	Before o4zkt2ba

Running on/with	Platform Versions
Lenovo Ideacentre G5 14amr05	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre G5 14imb05 Firmware	Before o4hkt3ca

Running on/with	Platform Versions
Lenovo Ideacentre G5 14imb05	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Gaming 5 14iob6 Firmware	Before m3gkt3da

Running on/with	Platform Versions
Lenovo Ideacentre Gaming 5 14iob6	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Mini 5 01iaq7 Firmware	Before o53kt10a

Running on/with	Platform Versions
Lenovo Ideacentre Mini 5 01iaq7	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Ideacentre Mini 5 01imh05 Firmware	Before o4ekt1ba

Running on/with	Platform Versions
Lenovo Ideacentre Mini 5 01imh05	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Legion T7 34imz5 Firmware	Before o5fkt17a

Running on/with	Platform Versions
Lenovo Legion T7 34imz5	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M625q Firmware	Before m1wkt52a

Running on/with	Platform Versions
Lenovo Thinkcentre M625q	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M630e Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M630e	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70a Firmware	Before m2skt29a

Running on/with	Platform Versions
Lenovo Thinkcentre M70a	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920z All In One Firmware	Before m1mkt56a

Running on/with	Platform Versions
Lenovo Thinkcentre M920z All In One	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920x Firmware	Before m1ukt72a

Running on/with	Platform Versions
Lenovo Thinkcentre M920x	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920t Firmware	Before m1ukt72a

Running on/with	Platform Versions
Lenovo Thinkcentre M920t	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920s Firmware	Before m1ukt72a

Running on/with	Platform Versions
Lenovo Thinkcentre M920s	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M920q Firmware	Before m1ukt72a

Running on/with	Platform Versions
Lenovo Thinkcentre M920q	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90t Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M90t	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90s Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M90s	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90q Tiny Firmware	Before m2wkt5aa

Running on/with	Platform Versions
Lenovo Thinkcentre M90q Tiny	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M90a Firmware	Before m2rkt57a

Running on/with	Platform Versions
Lenovo Thinkcentre M90a	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M820z All In One Firmware	Before m1nkt62a

Running on/with	Platform Versions
Lenovo Thinkcentre M820z All In One	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80t Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M80t	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80s Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M80s	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M80q Firmware	Before m2wkt5aa

Running on/with	Platform Versions
Lenovo Thinkcentre M80q	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75t Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M75t Gen 2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75s Gen 2 Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkcentre M75s Gen 2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75q Gen 2 Firmware	Before m47kt30a

Running on/with	Platform Versions
Lenovo Thinkcentre M75q Gen 2	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M75n Firmware	Before m33kt27a

Running on/with	Platform Versions
Lenovo Thinkcentre M75n	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M720t Firmware	Before m1ukt72a

Running on/with	Platform Versions
Lenovo Thinkcentre M720t	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M720s Firmware	Before m1ukt72a

Running on/with	Platform Versions
Lenovo Thinkcentre M720s	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M720q Firmware	Before m1ukt72a

Running on/with	Platform Versions
Lenovo Thinkcentre M720q	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70t Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M70t	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70s Firmware	Before m2tkt55a

Running on/with	Platform Versions
Lenovo Thinkcentre M70s	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70q Firmware	Before m2wkt5aa

Running on/with	Platform Versions
Lenovo Thinkcentre M70q	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50t 13iob G2 Firmware	Before m3gkt3da

Running on/with	Platform Versions
Lenovo V50t 13iob G2	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V55t Gen 2 13acn Firmware	Before o5jkt23a

Running on/with	Platform Versions
Lenovo V55t Gen 2 13acn	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50t 13imh Firmware	Before m4pkt13a

Running on/with	Platform Versions
Lenovo V50t 13imh	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50t 13imb Firmware	Before o4hkt3ca

Running on/with	Platform Versions
Lenovo V50t 13imb	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50s 07imb Firmware	Before m2vkt21a

Running on/with	Platform Versions
Lenovo V50s 07imb	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50a 24imb Firmware	Before m36kt32a

Running on/with	Platform Versions
Lenovo V50a 24imb	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V50a 22imb Firmware	Before m36kt32a

Running on/with	Platform Versions
Lenovo V50a 22imb	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V30a 24iml Firmware	Before m37kt31a

Running on/with	Platform Versions
Lenovo V30a 24iml	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo V30a 22iml Firmware	Before m37kt31a

Running on/with	Platform Versions
Lenovo V30a 22iml	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkcentre M70c Firmware	Before m2vkt21a

Running on/with	Platform Versions
Lenovo Thinkcentre M70c	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkedge Se30 Firmware	Before m3fkt2da

Running on/with	Platform Versions
Lenovo Thinkedge Se30	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P920 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P920 Workstation	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P720 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P720 Workstation	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P520c Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P520c Workstation	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P520 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P520 Workstation	All versions

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo Thinkstation P360 Workstation Firmware	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P360 Workstation Firmware	Before s0ekt45a

Running on/with	Platform Versions
Lenovo Thinkstation P360 Workstation	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P350 Workstation Firmware	All versions

Running on/with	Platform Versions
Lenovo Thinkstation P350 Workstation	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P348 Workstation Firmware	Before m3kkt3ba

Running on/with	Platform Versions
Lenovo Thinkstation P348 Workstation	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P340 Workstation Firmware	Before s08kt55a

Running on/with	Platform Versions
Lenovo Thinkstation P340 Workstation	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P340 Tiny Workstation Firmware	Before m2wkt5aa

Running on/with	Platform Versions
Lenovo Thinkstation P340 Tiny Workstation	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P330 Workstation 2nd Gen Firmware	Before m1vkt72a

Running on/with	Platform Versions
Lenovo Thinkstation P330 Workstation 2nd Gen	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P330 Workstation Firmware	Before m1vkt72a

Running on/with	Platform Versions
Lenovo Thinkstation P330 Workstation	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P330 Tiny Workstation Firmware	Before m1ukt72a

Running on/with	Platform Versions
Lenovo Thinkstation P330 Tiny Workstation	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Lenovo Thinkstation P320 Workstation Firmware	Before s06kt64a

Running on/with	Platform Versions
Lenovo Thinkstation P320 Workstation	All versions

Related CWEs

CWE-125

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-141775

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-141775

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.