CVE Feed

    Dashboard / CVE / CVE-2023-43576

    CVE-2023-43576

    A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

    Published:Nov 8, 2023
    Last Modified:Nov 21, 2024
    EPS:Nov 8, 2023
    EPSS Score:0.00037
    CVSS Score:6.7

    Affected Products

    Vendor
    Lenovo
    Product
    Ideacentre 3-07ada05
    Vendor
    Lenovo
    Product
    Ideacentre 3-07ada05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05
    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14acn6
    Vendor
    Lenovo
    Product
    Ideacentre 5-14acn6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre 5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5 14iab7
    Vendor
    Lenovo
    Product
    Ideacentre 5 14iab7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5 14irb8
    Vendor
    Lenovo
    Product
    Ideacentre 5 14irb8 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22iil5
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22iil5 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22imb05
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22itl6
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-22itl6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24alc6
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24alc6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24iil5
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24iil5 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24imb05
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24itl6
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-24itl6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27imb05
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27itl6
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3-27itl6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 21itl7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 21itl7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 22iap7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 22iap7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 24iap7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 24iap7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 27iap7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 3 27iap7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 5 24iah7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 5 24iah7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Aio 5 27iah7
    Vendor
    Lenovo
    Product
    Ideacentre Aio 5 27iah7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre C5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre C5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre G5-14amr05
    Vendor
    Lenovo
    Product
    Ideacentre G5-14amr05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14acn6
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14acn6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17acn7
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17acn7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17iab7
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5 17iab7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5-01imh05
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5-01imh05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5 01iaq7
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5 01iaq7 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre T540-15ama G
    Vendor
    Lenovo
    Product
    Ideacentre T540-15ama G Firmware
    Vendor
    Lenovo
    Product
    Legion T5 26iab7
    Vendor
    Lenovo
    Product
    Legion T5 26iab7 Firmware
    Vendor
    Lenovo
    Product
    Legion T5 26irb8
    Vendor
    Lenovo
    Product
    Legion T5 26irb8 Firmware
    Vendor
    Lenovo
    Product
    Legion T7-34iaz7
    Vendor
    Lenovo
    Product
    Legion T7-34iaz7 Firmware
    Vendor
    Lenovo
    Product
    Legion T7-34imz5
    Vendor
    Lenovo
    Product
    Legion T7-34imz5 Firmware
    Vendor
    Lenovo
    Product
    Legion T7 34irz8
    Vendor
    Lenovo
    Product
    Legion T7 34irz8 Firmware
    Vendor
    Lenovo
    Product
    Loq 17irb8
    Vendor
    Lenovo
    Product
    Loq 17irb8 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M625q
    Vendor
    Lenovo
    Product
    Thinkcentre M625q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M630e
    Vendor
    Lenovo
    Product
    Thinkcentre M630e Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70a Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M70a Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70c
    Vendor
    Lenovo
    Product
    Thinkcentre M70c Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70s
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70t
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75n
    Vendor
    Lenovo
    Product
    Thinkcentre M75n Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75q Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75q Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80q
    Vendor
    Lenovo
    Product
    Thinkcentre M80q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80q Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M80q Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80s
    Vendor
    Lenovo
    Product
    Thinkcentre M80s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80s Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M80s Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80t
    Vendor
    Lenovo
    Product
    Thinkcentre M80t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M80t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Pro Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Pro Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Tiny
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90s
    Vendor
    Lenovo
    Product
    Thinkcentre M90s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90s Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90s Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90t
    Vendor
    Lenovo
    Product
    Thinkcentre M90t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre M90t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920z All-in-one
    Vendor
    Lenovo
    Product
    Thinkcentre M920z All-in-one Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 22 Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 22 Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 22 Gen 4
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 22 Gen 4 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 24 Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 24 Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 24 Gen 4
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 24 Gen 4 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 27 Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 27 Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 27 Gen 4
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 30a 27 Gen 4 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50a 24 Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50a 24 Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50a 24 Gen 4
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50a 24 Gen 4 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 50t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 70t Gen 3
    Vendor
    Lenovo
    Product
    Thinkcentre Neo 70t Gen 3 Firmware
    Vendor
    Lenovo
    Product
    Thinkedge Se30
    Vendor
    Lenovo
    Product
    Thinkedge Se30 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P320 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P320 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P330 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P330 Workstation 2nd Gen
    Vendor
    Lenovo
    Product
    Thinkstation P330 Workstation 2nd Gen Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P330 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P340 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P348 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P348 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P350 Tiny Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P350 Tiny Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P350 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P350 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P358 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P358 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P360 Tiny Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P360 Tiny Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P360 Ultra Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P360 Ultra Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P360 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P360 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P520 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P520 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P520c Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P520c Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P720 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P720 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P920 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P920 Workstation Firmware
    Vendor
    Lenovo
    Product
    V30a-22iml
    Vendor
    Lenovo
    Product
    V30a-22iml Firmware
    Vendor
    Lenovo
    Product
    V30a-22itl
    Vendor
    Lenovo
    Product
    V30a-22itl Firmware
    Vendor
    Lenovo
    Product
    V30a-24iml
    Vendor
    Lenovo
    Product
    V30a-24iml Firmware
    Vendor
    Lenovo
    Product
    V30a-24itl
    Vendor
    Lenovo
    Product
    V30a-24itl Firmware
    Vendor
    Lenovo
    Product
    V50a-22imb
    Vendor
    Lenovo
    Product
    V50a-22imb Firmware
    Vendor
    Lenovo
    Product
    V50a-24imb
    Vendor
    Lenovo
    Product
    V50a-24imb Firmware
    Vendor
    Lenovo
    Product
    V50s-07imb
    Vendor
    Lenovo
    Product
    V50s-07imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13imb
    Vendor
    Lenovo
    Product
    V50t-13imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13imh
    Vendor
    Lenovo
    Product
    V50t-13imh Firmware
    Vendor
    Lenovo
    Product
    V50t-13iob
    Vendor
    Lenovo
    Product
    V50t-13iob Firmware
    Vendor
    Lenovo
    Product
    V55t Gen 2 13acn
    Vendor
    Lenovo
    Product
    V55t Gen 2 13acn Firmware
    Vendor
    Lenovo
    Product
    Yoga Aio 7-27arh6
    Vendor
    Lenovo
    Product
    Yoga Aio 7-27arh6 Firmware
    Vendor
    Lenovo
    Product
    Yoga Aio 7 27arh7
    Vendor
    Lenovo
    Product
    Yoga Aio 7 27arh7 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-43577 (CVSS 6.7) — A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local at…
    CVE-2023-43575 (CVSS 6.7) — A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow…
    CVE-2023-43574 (CVSS 4.4) — A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products …
    CVE-2023-43573 (CVSS 6.7) — A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products t…
    CVE-2023-43572 (CVSS 4.4) — A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may all…
    CVE-2023-45079 (CVSS 6.7) — A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with e…
    CVE-2023-45078 (CVSS 6.7) — A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attack…
    CVE-2023-45077 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with el…
    CVE-2023-45076 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with el…
    CVE-2023-45075 (CVSS 6.7) — A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker wit…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High