MEDIUM🇵🇱 Wersja polska

CVE-2023-43571

CVSS 6.7v3.1pub. 2023-11-08upd. 2024-11-21

A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

  • Lenovo Ideacentre 3 07ada05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 3 07ada05 Firmware

    OS
    Lenovo
    < o4fkt39a

  • Lenovo Ideacentre 3 07imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 3 07imb05 Firmware

    OS
    Lenovo
    < m2vkt21a

  • Lenovo Ideacentre 5 14acn6

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14acn6 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14iab7

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14iab7 Firmware

    OS
    Lenovo
    < m42kt46a

  • Lenovo Ideacentre 5 14irb8

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre 5 14irb8 Firmware

    OS
    Lenovo
    < m4ukt36a

  • Lenovo Ideacentre C5 14imb05

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre C5 14imb05 Firmware

    OS
    Lenovo
    < o4hkt3ca

  • Lenovo Ideacentre T540 15ama G

    HW
    Lenovo
    all versions

  • Lenovo Ideacentre T540 15ama G Firmware

    OS
    Lenovo
    all versions

  • Lenovo Loq 17irb8 Firmware

    OS
    Lenovo
    < m4ukt36a

  • Lenovo Thinkcentre M625q

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M625q Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkcentre M630e

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M630e Firmware

    OS
    Lenovo
    < m28kt42a

  • Lenovo Thinkcentre M70a Gen 3

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M70a Gen 3 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkcentre M70c

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M70c Firmware

    OS
    Lenovo
    < m2vkt21a

  • Lenovo Thinkcentre M70q

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M70q Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkcentre M70q Gen 2

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M70q Gen 2 Firmware

    OS
    Lenovo
    all versions

  • Lenovo Thinkcentre M70s

    HW
    Lenovo
    all versions

  • Lenovo Thinkcentre M70s Firmware

    OS
    Lenovo
    < m2tkt55a

  • Lenovo Thinkcentre M70s Gen 3

    HW
    Lenovo
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2023-43570MEDIUM6.7same product

A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a loc...

CVE-2023-43568MEDIUM4.4same product

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may a...

CVE-2023-43567MEDIUM6.7same product

A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may al...

CVE-2023-43569MEDIUM6.7same product

A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local att...

CVE-2023-43572MEDIUM4.4same product

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may all...