Desktop
by Lenovo
CVEs (17)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-43581 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43580 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43579 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43578 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43577 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43576 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43575 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43573 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43571 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43570 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code. | ||
| CVE-2023-43569 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2023-43567 | Med | 0.44 | 6.7 | 0.00 | Nov 8, 2023 | A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. | ||
| CVE-2021-3453 | Med | 0.44 | 6.8 | 0.00 | Jul 16, 2021 | Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage. | ||
| CVE-2023-43574 | Med | 0.29 | 4.4 | 0.00 | Nov 8, 2023 | A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information. | ||
| CVE-2023-43572 | Med | 0.29 | 4.4 | 0.00 | Nov 8, 2023 | A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information. | ||
| CVE-2023-43568 | Med | 0.29 | 4.4 | 0.00 | Nov 8, 2023 | A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information. | ||
| CVE-2020-8352 | Low | 0.16 | 2.4 | 0.00 | Nov 11, 2020 | In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes. |
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.7epss 0.00
A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
- risk 0.44cvss 6.8epss 0.00
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.
- risk 0.29cvss 4.4epss 0.00
A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
- risk 0.29cvss 4.4epss 0.00
A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
- risk 0.29cvss 4.4epss 0.00
A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
- risk 0.16cvss 2.4epss 0.00
In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.