CVE-2023-2290

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2023-06-26

Last modified

2024-12-03

Weaknesses

CWE-787

Affected products

• Thinkpad (Lenovo)
• Thinkpad E14 (Lenovo)
• Thinkpad E14 Firmware (Lenovo)
• Thinkpad E14 Gen2 (Lenovo)
• Thinkpad E14 Gen 2 Firmware (Lenovo)
• Thinkpad E14 Gen 4 Firmware (Lenovo)
• Thinkpad E15 (Lenovo)
• Thinkpad E15 Firmware (Lenovo)
• Thinkpad E15 Gen 2 Firmware (Lenovo)
• Thinkpad E15 Gen 4 Firmware (Lenovo)
• Thinkpad E490 (Lenovo)
• Thinkpad E490 Firmware (Lenovo)
• Thinkpad E490s Firmware (Lenovo)
• Thinkpad E590 Firmware (Lenovo)
• Thinkpad L13 Gen 3 Firmware (Lenovo)
• Thinkpad L13 Yoga Gen 3 Firmware (Lenovo)
• Thinkpad L14 Firmware (Lenovo)
• Thinkpad L15 Firmware (Lenovo)
• Thinkpad L15 Gen 2 Firmware (Lenovo)
• Thinkpad L15 Gen 3 Firmware (Lenovo)
• Thinkpad L490 Firmware (Lenovo)
• Thinkpad L590 Firmware (Lenovo)
• Thinkpad P14s Gen 1 Firmware (Lenovo)
• Thinkpad P14s Gen 2 Firmware (Lenovo)
• Thinkpad P14s Gen 3 Firmware (Lenovo)
• Thinkpad P15 Gen 1 Firmware (Lenovo)
• Thinkpad P15 Gen 2 Firmware (Lenovo)
• Thinkpad P15s Gen 1 Firmware (Lenovo)
• Thinkpad P15s Gen 2 Firmware (Lenovo)
• Thinkpad P15v Gen 1 Firmware (Lenovo)
• Thinkpad P15v Gen 2 Firmware (Lenovo)
• Thinkpad P15v Gen 3 Firmware (Lenovo)
• Thinkpad P16 Gen 1 Firmware (Lenovo)
• Thinkpad P16s Gen 1 Firmware (Lenovo)
• Thinkpad P17 Gen 1 Firmware (Lenovo)
• Thinkpad P17 Gen 2 Firmware (Lenovo)
• Thinkpad P1 Gen 2 Firmware (Lenovo)
• Thinkpad P1 Gen 3 Firmware (Lenovo)
• Thinkpad P1 Gen 4 Firmware (Lenovo)
• Thinkpad P1 Gen 5 Firmware (Lenovo)
• Thinkpad P43s Firmware (Lenovo)
• Thinkpad P53 Firmware (Lenovo)
• Thinkpad P53s Firmware (Lenovo)
• Thinkpad P73 Firmware (Lenovo)
• Thinkpad T14 Gen 1 Firmware (Lenovo)
• Thinkpad T14 Gen 2 Firmware (Lenovo)
• Thinkpad T14 Gen 3 Firmware (Lenovo)
• Thinkpad T14s Firmware (Lenovo)
• Thinkpad T14s Gen 2 Firmware (Lenovo)
• Thinkpad T14s Gen 3 Firmware (Lenovo)
• Thinkpad T15 Firmware (Lenovo)
• Thinkpad T15 Gen 2 Firmware (Lenovo)
• Thinkpad T15g Gen 1 Firmware (Lenovo)
• Thinkpad T15g Gen 2 Firmware (Lenovo)
• Thinkpad T15p Gen 1 Firmware (Lenovo)
• Thinkpad T15p Gen 2 Firmware (Lenovo)
• Thinkpad T15p Gen 3 Firmware (Lenovo)
• Thinkpad T16 Gen 1 Firmware (Lenovo)
• Thinkpad T490 Firmware (Lenovo)
• Thinkpad T490s Firmware (Lenovo)
• Thinkpad T590 Firmware (Lenovo)
• Thinkpad Thinkpad R14 Gen 2 Firmware (Lenovo)
• Thinkpad Thinkpad R14 Gen 4 Firmware (Lenovo)
• Thinkpad Thinkpad S3 2nd Gen Firmware (Lenovo)
• Thinkpad X12 Detachable Gen 1 Firmware (Lenovo)
• Thinkpad X13 Firmware (Lenovo)
• Thinkpad X13 Gen 2 Firmware (Lenovo)
• Thinkpad X13 Gen 3 Firmware (Lenovo)
• Thinkpad X13 Yoga Gen 1 Firmware (Lenovo)
• Thinkpad X13 Yoga Gen 2 Firmware (Lenovo)
• Thinkpad X13 Yoga Gen 3 Firmware (Lenovo)
• Thinkpad X1 Carbon 10th Gen Firmware (Lenovo)
• Thinkpad X1 Carbon 7th Gen Firmware (Lenovo)
• Thinkpad X1 Carbon 8th Gen Firmware (Lenovo)
• Thinkpad X1 Carbon 9th Gen Firmware (Lenovo)
• Thinkpad X1 Extreme 2nd Gen Firmware (Lenovo)
• Thinkpad X1 Extreme 3rd Gen Firmware (Lenovo)
• Thinkpad X1 Extreme 4th Gen Firmware (Lenovo)
• Thinkpad X1 Extreme Gen 5 Firmware (Lenovo)
• Thinkpad X1 Nano Gen 1 Firmware (Lenovo)
• Thinkpad X1 Nano Gen 2 Firmware (Lenovo)
• Thinkpad X1 Titanium Firmware (Lenovo)
• Thinkpad X1 Yoga 4th Gen Firmware (Lenovo)
• Thinkpad X1 Yoga 5th Gen Firmware (Lenovo)
• Thinkpad X1 Yoga 6th Gen Firmware (Lenovo)
• Thinkpad X1 Yoga 7th Gen Firmware (Lenovo)
• Thinkpad X390 Firmware (Lenovo)
• Thinkpad X390 Yoga Firmware (Lenovo)
• Thinkpad Z13 Gen 1 Firmware (Lenovo)
• Thinkpad Z16 Gen 1 Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-106014