CVE Feed

    Dashboard / CVE / CVE-2023-45078

    CVE-2023-45078

    A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

    Published:Nov 8, 2023
    Last Modified:Nov 21, 2024
    EPS:Nov 8, 2023
    EPSS Score:0.00035
    CVSS Score:6.7

    Affected Products

    Vendor
    Lenovo
    Product
    Ideacentre 3-07ada05
    Vendor
    Lenovo
    Product
    Ideacentre 3-07ada05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05
    Vendor
    Lenovo
    Product
    Ideacentre 3-07imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre C5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre C5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Creator 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre G5-14amr05
    Vendor
    Lenovo
    Product
    Ideacentre G5-14amr05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05
    Vendor
    Lenovo
    Product
    Ideacentre G5-14imb05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6
    Vendor
    Lenovo
    Product
    Ideacentre Gaming 5-14iob6 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5-01imh05
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5-01imh05 Firmware
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5 01iaq7
    Vendor
    Lenovo
    Product
    Ideacentre Mini 5 01iaq7 Firmware
    Vendor
    Lenovo
    Product
    Legion T7-34imz5
    Vendor
    Lenovo
    Product
    Legion T7-34imz5 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M625q
    Vendor
    Lenovo
    Product
    Thinkcentre M625q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M630e
    Vendor
    Lenovo
    Product
    Thinkcentre M630e Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70a
    Vendor
    Lenovo
    Product
    Thinkcentre M70a Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70c
    Vendor
    Lenovo
    Product
    Thinkcentre M70c Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70q
    Vendor
    Lenovo
    Product
    Thinkcentre M70q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70s
    Vendor
    Lenovo
    Product
    Thinkcentre M70s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M70t
    Vendor
    Lenovo
    Product
    Thinkcentre M70t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720q
    Vendor
    Lenovo
    Product
    Thinkcentre M720q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720s
    Vendor
    Lenovo
    Product
    Thinkcentre M720s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M720t
    Vendor
    Lenovo
    Product
    Thinkcentre M720t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75n
    Vendor
    Lenovo
    Product
    Thinkcentre M75n Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75q Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75q Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75s Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2
    Vendor
    Lenovo
    Product
    Thinkcentre M75t Gen 2 Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80q
    Vendor
    Lenovo
    Product
    Thinkcentre M80q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80s
    Vendor
    Lenovo
    Product
    Thinkcentre M80s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M80t
    Vendor
    Lenovo
    Product
    Thinkcentre M80t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M820z All-in-one
    Vendor
    Lenovo
    Product
    Thinkcentre M820z All-in-one Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90a
    Vendor
    Lenovo
    Product
    Thinkcentre M90a Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Tiny
    Vendor
    Lenovo
    Product
    Thinkcentre M90q Tiny Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90s
    Vendor
    Lenovo
    Product
    Thinkcentre M90s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M90t
    Vendor
    Lenovo
    Product
    Thinkcentre M90t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920q
    Vendor
    Lenovo
    Product
    Thinkcentre M920q Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920s
    Vendor
    Lenovo
    Product
    Thinkcentre M920s Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920t
    Vendor
    Lenovo
    Product
    Thinkcentre M920t Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920x
    Vendor
    Lenovo
    Product
    Thinkcentre M920x Firmware
    Vendor
    Lenovo
    Product
    Thinkcentre M920z All-in-one
    Vendor
    Lenovo
    Product
    Thinkcentre M920z All-in-one Firmware
    Vendor
    Lenovo
    Product
    Thinkedge Se30
    Vendor
    Lenovo
    Product
    Thinkedge Se30 Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P320 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P320 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P330 Tiny Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P330 Tiny Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P330 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P330 Workstation 2nd Gen
    Vendor
    Lenovo
    Product
    Thinkstation P330 Workstation 2nd Gen Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P330 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P340 Tiny Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P340 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P340 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P348 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P348 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P350 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P350 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P360 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P360 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P520 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P520 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P520c Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P520c Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P720 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P720 Workstation Firmware
    Vendor
    Lenovo
    Product
    Thinkstation P920 Workstation
    Vendor
    Lenovo
    Product
    Thinkstation P920 Workstation Firmware
    Vendor
    Lenovo
    Product
    V30a-22iml
    Vendor
    Lenovo
    Product
    V30a-22iml Firmware
    Vendor
    Lenovo
    Product
    V30a-24iml
    Vendor
    Lenovo
    Product
    V30a-24iml Firmware
    Vendor
    Lenovo
    Product
    V50a-22imb
    Vendor
    Lenovo
    Product
    V50a-22imb Firmware
    Vendor
    Lenovo
    Product
    V50a-24imb
    Vendor
    Lenovo
    Product
    V50a-24imb Firmware
    Vendor
    Lenovo
    Product
    V50s-07imb
    Vendor
    Lenovo
    Product
    V50s-07imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13imb
    Vendor
    Lenovo
    Product
    V50t-13imb Firmware
    Vendor
    Lenovo
    Product
    V50t-13imh
    Vendor
    Lenovo
    Product
    V50t-13imh Firmware
    Vendor
    Lenovo
    Product
    V50t-13iob G2
    Vendor
    Lenovo
    Product
    V50t-13iob G2 Firmware
    Vendor
    Lenovo
    Product
    V55t Gen 2 13acn
    Vendor
    Lenovo
    Product
    V55t Gen 2 13acn Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2023-43577 (CVSS 6.7) — A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local at…
    CVE-2023-43576 (CVSS 6.7) — A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local a…
    CVE-2023-43575 (CVSS 6.7) — A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow…
    CVE-2023-43574 (CVSS 4.4) — A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products …
    CVE-2023-43573 (CVSS 6.7) — A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products t…
    CVE-2023-43572 (CVSS 4.4) — A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may all…
    CVE-2023-45079 (CVSS 6.7) — A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with e…
    CVE-2023-45077 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with el…
    CVE-2023-45076 (CVSS 6.7) — A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with el…
    CVE-2023-45075 (CVSS 6.7) — A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker wit…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High