CVE-2023-43570

A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2023-11-08

Last modified

2024-09-12

Weaknesses

CWE-20

Affected products

• Desktop Bios (Lenovo)
• Ideacentre 3-07ada05 Firmware (Lenovo)
• Ideacentre 3-07imb05 Firmware (Lenovo)
• Ideacentre 5-14acn6 Firmware (Lenovo)
• Ideacentre 5-14imb05 Firmware (Lenovo)
• Ideacentre 5-14iob6 Firmware (Lenovo)
• Ideacentre 5 14iab7 Firmware (Lenovo)
• Ideacentre 5 14irb8 Firmware (Lenovo)
• Ideacentre Aio 3-22iil5 Firmware (Lenovo)
• Ideacentre Aio 3-22imb05 Firmware (Lenovo)
• Ideacentre Aio 3-22itl6 Firmware (Lenovo)
• Ideacentre Aio 3-24alc6 Firmware (Lenovo)
• Ideacentre Aio 3-24iil5 Firmware (Lenovo)
• Ideacentre Aio 3-24imb05 Firmware (Lenovo)
• Ideacentre Aio 3-24itl6 Firmware (Lenovo)
• Ideacentre Aio 3-27imb05 Firmware (Lenovo)
• Ideacentre Aio 3-27itl6 Firmware (Lenovo)
• Ideacentre Aio 3 21itl7 Firmware (Lenovo)
• Ideacentre Aio 3 22iap7 Firmware (Lenovo)
• Ideacentre Aio 3 24iap7 Firmware (Lenovo)
• Ideacentre Aio 3 27iap7 Firmware (Lenovo)
• Ideacentre Aio 5 24iah7 Firmware (Lenovo)
• Ideacentre Aio 5 27iah7 Firmware (Lenovo)
• Ideacentre C5-14imb05 Firmware (Lenovo)
• Ideacentre Creator 5-14iob6 Firmware (Lenovo)
• Ideacentre G5-14amr05 Firmware (Lenovo)
• Ideacentre G5-14imb05 Firmware (Lenovo)
• Ideacentre Gaming 5-14acn6 Firmware (Lenovo)
• Ideacentre Gaming 5-14iob6 Firmware (Lenovo)
• Ideacentre Gaming 5 17acn7 Firmware (Lenovo)
• Ideacentre Gaming 5 17iab7 Firmware (Lenovo)
• Ideacentre Mini 5-01imh05 Firmware (Lenovo)
• Ideacentre Mini 5 01iaq7 Firmware (Lenovo)
• Ideacentre T540-15ama G Firmware (Lenovo)
• Legion T5 26iab7 Firmware (Lenovo)
• Legion T5 26irb8 Firmware (Lenovo)
• Legion T7-34iaz7 Firmware (Lenovo)
• Legion T7-34imz5 Firmware (Lenovo)
• Legion T7 34irz8 Firmware (Lenovo)
• Loq 17irb8 Firmware (Lenovo)
• Thinkcentre M625q Firmware (Lenovo)
• Thinkcentre M630e Firmware (Lenovo)
• Thinkcentre M70a Gen 3 Firmware (Lenovo)
• Thinkcentre M70c Firmware (Lenovo)
• Thinkcentre M70q Firmware (Lenovo)
• Thinkcentre M70q Gen 2 Firmware (Lenovo)
• Thinkcentre M70s Firmware (Lenovo)
• Thinkcentre M70s Gen 3 Firmware (Lenovo)
• Thinkcentre M70t Firmware (Lenovo)
• Thinkcentre M70t Gen 3 Firmware (Lenovo)
• Thinkcentre M75n Firmware (Lenovo)
• Thinkcentre M75q Gen 2 Firmware (Lenovo)
• Thinkcentre M75s Gen 2 Firmware (Lenovo)
• Thinkcentre M75t Gen 2 Firmware (Lenovo)
• Thinkcentre M80q Firmware (Lenovo)
• Thinkcentre M80q Gen 3 Firmware (Lenovo)
• Thinkcentre M80s Firmware (Lenovo)
• Thinkcentre M80s Gen 3 Firmware (Lenovo)
• Thinkcentre M80t Firmware (Lenovo)
• Thinkcentre M80t Gen 3 Firmware (Lenovo)
• Thinkcentre M90a Firmware (Lenovo)
• Thinkcentre M90a Gen 2 Firmware (Lenovo)
• Thinkcentre M90a Gen 3 Firmware (Lenovo)
• Thinkcentre M90a Pro Gen 3 Firmware (Lenovo)
• Thinkcentre M90q Gen 2 Firmware (Lenovo)
• Thinkcentre M90q Gen 3 Firmware (Lenovo)
• Thinkcentre M90q Tiny Firmware (Lenovo)
• Thinkcentre M90s Firmware (Lenovo)
• Thinkcentre M90s Gen 3 Firmware (Lenovo)
• Thinkcentre M90t Firmware (Lenovo)
• Thinkcentre M90t Gen 3 Firmware (Lenovo)
• Thinkcentre M920z All-in-one Firmware (Lenovo)
• Thinkcentre Neo 30a 22 Gen 3 Firmware (Lenovo)
• Thinkcentre Neo 30a 22 Gen 4 Firmware (Lenovo)
• Thinkcentre Neo 30a 24 Gen 3 Firmware (Lenovo)
• Thinkcentre Neo 30a 24 Gen 4 Firmware (Lenovo)
• Thinkcentre Neo 30a 27 Gen 3 Firmware (Lenovo)
• Thinkcentre Neo 30a 27 Gen 4 Firmware (Lenovo)
• Thinkcentre Neo 50a 24 Gen 3 Firmware (Lenovo)
• Thinkcentre Neo 50a 24 Gen 4 Firmware (Lenovo)
• Thinkcentre Neo 50t Gen 3 Firmware (Lenovo)
• Thinkcentre Neo 70t Gen 3 Firmware (Lenovo)
• Thinkedge Se30 Firmware (Lenovo)
• Thinkstation P320 Workstation Firmware (Lenovo)
• Thinkstation P330 Workstation 2nd Gen Firmware (Lenovo)
• Thinkstation P330 Workstation Firmware (Lenovo)
• Thinkstation P340 Tiny Workstation Firmware (Lenovo)
• Thinkstation P340 Workstation Firmware (Lenovo)
• Thinkstation P348 Workstation Firmware (Lenovo)
• Thinkstation P350 Tiny Workstation Firmware (Lenovo)
• Thinkstation P350 Workstation Firmware (Lenovo)
• Thinkstation P358 Workstation Firmware (Lenovo)
• Thinkstation P360 Tiny Workstation Firmware (Lenovo)
• Thinkstation P360 Ultra Workstation Firmware (Lenovo)
• Thinkstation P360 Workstation Firmware (Lenovo)
• Thinkstation P520 Workstation Firmware (Lenovo)
• Thinkstation P520c Workstation Firmware (Lenovo)
• Thinkstation P720 Workstation Firmware (Lenovo)
• Thinkstation P920 Workstation Firmware (Lenovo)
• V30a-22iml Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-141775