CVE-2023-43577
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- Score
- CVSS 3.1 6.7 Medium
- Status
- Modified - psirt@lenovo.com
- Published
- 2023-11-08
- Last modified
- 2024-08-02
- Weaknesses
- CWE-120
Affected products
- Desktop Bios (Lenovo)
- Ideacentre 3-07ada05 Firmware (Lenovo)
- Ideacentre 3-07imb05 Firmware (Lenovo)
- Ideacentre 5-14acn6 Firmware (Lenovo)
- Ideacentre 5-14imb05 Firmware (Lenovo)
- Ideacentre 5-14iob6 Firmware (Lenovo)
- Ideacentre 5 14iab7 Firmware (Lenovo)
- Ideacentre 5 14irb8 Firmware (Lenovo)
- Ideacentre Aio 3-22iil5 Firmware (Lenovo)
- Ideacentre Aio 3-22imb05 Firmware (Lenovo)
- Ideacentre Aio 3-22itl6 Firmware (Lenovo)
- Ideacentre Aio 3-24alc6 Firmware (Lenovo)
- Ideacentre Aio 3-24iil5 Firmware (Lenovo)
- Ideacentre Aio 3-24imb05 Firmware (Lenovo)
- Ideacentre Aio 3-24itl6 Firmware (Lenovo)
- Ideacentre Aio 3-27imb05 Firmware (Lenovo)
- Ideacentre Aio 3-27itl6 Firmware (Lenovo)
- Ideacentre Aio 3 21itl7 Firmware (Lenovo)
- Ideacentre Aio 3 22iap7 Firmware (Lenovo)
- Ideacentre Aio 3 24iap7 Firmware (Lenovo)
- Ideacentre Aio 3 27iap7 Firmware (Lenovo)
- Ideacentre Aio 5 24iah7 Firmware (Lenovo)
- Ideacentre Aio 5 27iah7 Firmware (Lenovo)
- Ideacentre C5-14imb05 Firmware (Lenovo)
- Ideacentre Creator 5-14iob6 Firmware (Lenovo)
- Ideacentre G5-14amr05 Firmware (Lenovo)
- Ideacentre G5-14imb05 Firmware (Lenovo)
- Ideacentre Gaming 5-14acn6 Firmware (Lenovo)
- Ideacentre Gaming 5-14iob6 Firmware (Lenovo)
- Ideacentre Gaming 5 17acn7 Firmware (Lenovo)
- Ideacentre Gaming 5 17iab7 Firmware (Lenovo)
- Ideacentre Mini 5-01imh05 Firmware (Lenovo)
- Ideacentre Mini 5 01iaq7 Firmware (Lenovo)
- Ideacentre T540-15ama G Firmware (Lenovo)
- Legion T5 26iab7 Firmware (Lenovo)
- Legion T5 26irb8 Firmware (Lenovo)
- Legion T7-34iaz7 Firmware (Lenovo)
- Legion T7-34imz5 Firmware (Lenovo)
- Legion T7 34irz8 Firmware (Lenovo)
- Loq 17irb8 Firmware (Lenovo)
- Thinkcentre M625q Firmware (Lenovo)
- Thinkcentre M630e Firmware (Lenovo)
- Thinkcentre M70a Gen 3 Firmware (Lenovo)
- Thinkcentre M70c Firmware (Lenovo)
- Thinkcentre M70q Firmware (Lenovo)
- Thinkcentre M70q Gen 2 Firmware (Lenovo)
- Thinkcentre M70s Firmware (Lenovo)
- Thinkcentre M70s Gen 3 Firmware (Lenovo)
- Thinkcentre M70t Firmware (Lenovo)
- Thinkcentre M70t Gen 3 Firmware (Lenovo)
- Thinkcentre M75n Firmware (Lenovo)
- Thinkcentre M75q Gen 2 Firmware (Lenovo)
- Thinkcentre M75s Gen 2 Firmware (Lenovo)
- Thinkcentre M75t Gen 2 Firmware (Lenovo)
- Thinkcentre M80q Firmware (Lenovo)
- Thinkcentre M80q Gen 3 Firmware (Lenovo)
- Thinkcentre M80s Firmware (Lenovo)
- Thinkcentre M80s Gen 3 Firmware (Lenovo)
- Thinkcentre M80t Firmware (Lenovo)
- Thinkcentre M80t Gen 3 Firmware (Lenovo)
- Thinkcentre M90a Firmware (Lenovo)
- Thinkcentre M90a Gen 2 Firmware (Lenovo)
- Thinkcentre M90a Gen 3 Firmware (Lenovo)
- Thinkcentre M90a Pro Gen 3 Firmware (Lenovo)
- Thinkcentre M90q Gen 2 Firmware (Lenovo)
- Thinkcentre M90q Gen 3 Firmware (Lenovo)
- Thinkcentre M90q Tiny Firmware (Lenovo)
- Thinkcentre M90s Firmware (Lenovo)
- Thinkcentre M90s Gen 3 Firmware (Lenovo)
- Thinkcentre M90t Firmware (Lenovo)
- Thinkcentre M90t Gen 3 Firmware (Lenovo)
- Thinkcentre M920z All-in-one Firmware (Lenovo)
- Thinkcentre Neo 30a 22 Gen 3 Firmware (Lenovo)
- Thinkcentre Neo 30a 22 Gen 4 Firmware (Lenovo)
- Thinkcentre Neo 30a 24 Gen 3 Firmware (Lenovo)
- Thinkcentre Neo 30a 24 Gen 4 Firmware (Lenovo)
- Thinkcentre Neo 30a 27 Gen 3 Firmware (Lenovo)
- Thinkcentre Neo 30a 27 Gen 4 Firmware (Lenovo)
- Thinkcentre Neo 50a 24 Gen 3 Firmware (Lenovo)
- Thinkcentre Neo 50a 24 Gen 4 Firmware (Lenovo)
- Thinkcentre Neo 50t Gen 3 Firmware (Lenovo)
- Thinkcentre Neo 70t Gen 3 Firmware (Lenovo)
- Thinkedge Se30 Firmware (Lenovo)
- Thinkstation P320 Workstation Firmware (Lenovo)
- Thinkstation P330 Workstation 2nd Gen Firmware (Lenovo)
- Thinkstation P330 Workstation Firmware (Lenovo)
- Thinkstation P340 Tiny Workstation Firmware (Lenovo)
- Thinkstation P340 Workstation Firmware (Lenovo)
- Thinkstation P348 Workstation Firmware (Lenovo)
- Thinkstation P350 Tiny Workstation Firmware (Lenovo)
- Thinkstation P350 Workstation Firmware (Lenovo)
- Thinkstation P358 Workstation Firmware (Lenovo)
- Thinkstation P360 Tiny Workstation Firmware (Lenovo)
- Thinkstation P360 Ultra Workstation Firmware (Lenovo)
- Thinkstation P360 Workstation Firmware (Lenovo)
- Thinkstation P520 Workstation Firmware (Lenovo)
- Thinkstation P520c Workstation Firmware (Lenovo)
- Thinkstation P720 Workstation Firmware (Lenovo)
- Thinkstation P920 Workstation Firmware (Lenovo)
- V30a-22iml Firmware (Lenovo)
References
- https://support.lenovo.com/us/en/product_security/LEN-141775
