CVE-2023-45075

A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2023-11-08

Last modified

2024-09-04

Weaknesses

CWE-125

Affected products

• Bios (Lenovo)
• Ideacentre 3-07ada05 Firmware (Lenovo)
• Ideacentre 3-07imb05 Firmware (Lenovo)
• Ideacentre 5-14iob6 Firmware (Lenovo)
• Ideacentre C5-14imb05 Firmware (Lenovo)
• Ideacentre Creator 5-14iob6 Firmware (Lenovo)
• Ideacentre G5-14amr05 Firmware (Lenovo)
• Ideacentre G5-14imb05 Firmware (Lenovo)
• Ideacentre Gaming 5-14iob6 Firmware (Lenovo)
• Ideacentre Mini 5-01imh05 Firmware (Lenovo)
• Ideacentre Mini 5 01iaq7 Firmware (Lenovo)
• Legion T7-34imz5 Firmware (Lenovo)
• Thinkcentre M625q Firmware (Lenovo)
• Thinkcentre M630e Firmware (Lenovo)
• Thinkcentre M70a Firmware (Lenovo)
• Thinkcentre M70c Firmware (Lenovo)
• Thinkcentre M70q Firmware (Lenovo)
• Thinkcentre M70s Firmware (Lenovo)
• Thinkcentre M70t Firmware (Lenovo)
• Thinkcentre M720q Firmware (Lenovo)
• Thinkcentre M720s Firmware (Lenovo)
• Thinkcentre M720t Firmware (Lenovo)
• Thinkcentre M75n Firmware (Lenovo)
• Thinkcentre M75q Gen 2 Firmware (Lenovo)
• Thinkcentre M75s Gen 2 Firmware (Lenovo)
• Thinkcentre M75t Gen 2 Firmware (Lenovo)
• Thinkcentre M80q Firmware (Lenovo)
• Thinkcentre M80s Firmware (Lenovo)
• Thinkcentre M80t Firmware (Lenovo)
• Thinkcentre M820z All-in-one Firmware (Lenovo)
• Thinkcentre M90a Firmware (Lenovo)
• Thinkcentre M90q Tiny Firmware (Lenovo)
• Thinkcentre M90s Firmware (Lenovo)
• Thinkcentre M90t Firmware (Lenovo)
• Thinkcentre M920q Firmware (Lenovo)
• Thinkcentre M920s Firmware (Lenovo)
• Thinkcentre M920t Firmware (Lenovo)
• Thinkcentre M920x Firmware (Lenovo)
• Thinkcentre M920z All-in-one Firmware (Lenovo)
• Thinkedge Se30 Firmware (Lenovo)
• Thinkstation P320 Workstation Firmware (Lenovo)
• Thinkstation P330 Tiny Workstation Firmware (Lenovo)
• Thinkstation P330 Workstation 2nd Gen Firmware (Lenovo)
• Thinkstation P330 Workstation Firmware (Lenovo)
• Thinkstation P340 Tiny Workstation Firmware (Lenovo)
• Thinkstation P340 Workstation Firmware (Lenovo)
• Thinkstation P348 Workstation Firmware (Lenovo)
• Thinkstation P350 Workstation Firmware (Lenovo)
• Thinkstation P360 Workstation Firmware (Lenovo)
• Thinkstation P520 Workstation Firmware (Lenovo)
• Thinkstation P520c Workstation Firmware (Lenovo)
• Thinkstation P720 Workstation Firmware (Lenovo)
• Thinkstation P920 Workstation Firmware (Lenovo)
• V30a-22iml Firmware (Lenovo)
• V30a-24iml Firmware (Lenovo)
• V50a-22imb Firmware (Lenovo)
• V50a-24imb Firmware (Lenovo)
• V50s-07imb Firmware (Lenovo)
• V50t-13imb Firmware (Lenovo)
• V50t-13imh Firmware (Lenovo)
• V50t-13iob G2 Firmware (Lenovo)
• V55t Gen 2 13acn Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-141775