CVE-2023-43570
Medium
Description
A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo Ideacentre C5-14imb05 Firmware
PublishedNov 8, 2023
First seenNov 8, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- lenovo ideacentre_c5-14imb05_firmwareo4hkt3ca or later
- lenovo ideacentre_3-07ada05_firmwareo4fkt39a or later
- lenovo ideacentre_3-07imb05_firmwarem2vkt21a or later
- lenovo ideacentre_5_14iab7_firmwarem42kt46a or later
- lenovo ideacentre_5_14irb8_firmwarem4ukt36a or later
- lenovo thinkcentre_neo_70t_gen_3_firmwarem40kt45a or later
- lenovo thinkcentre_neo_50t_gen_3_firmwarem42kt46a or later
- lenovo thinkcentre_neo_50a_24_gen_4_firmwareo5xkt18a or later
- lenovo thinkcentre_neo_50a_24_gen_3_firmwareo5rkt41a or later
- lenovo thinkcentre_neo_30a_27_gen_4_firmwareo5nkt33a or later
- lenovo thinkcentre_neo_30a_27_gen_3_firmwareo5nkt33a or later
- lenovo thinkcentre_neo_30a_24_gen_4_firmwareo5nkt33a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo ideacentre_c5-14imb05_firmware | v < o4hkt3ca | o4hkt3ca |
| lenovo ideacentre_3-07ada05_firmware | v < o4fkt39a | o4fkt39a |
| lenovo ideacentre_3-07imb05_firmware | v < m2vkt21a | m2vkt21a |
| lenovo ideacentre_5_14iab7_firmware | v < m42kt46a | m42kt46a |
| lenovo ideacentre_5_14irb8_firmware | v < m4ukt36a | m4ukt36a |
| lenovo ideacentre_5-14acn6_firmware | No range specified | — |
| lenovo ideacentre_t540-15ama_g_firmware | No range specified | — |
| lenovo thinkcentre_neo_70t_gen_3_firmware | v < m40kt45a | m40kt45a |
| lenovo thinkcentre_neo_50t_gen_3_firmware | v < m42kt46a | m42kt46a |
| lenovo thinkcentre_neo_50a_24_gen_4_firmware | v < o5xkt18a | o5xkt18a |
| lenovo thinkcentre_neo_50a_24_gen_3_firmware | v < o5rkt41a | o5rkt41a |
| lenovo thinkcentre_neo_30a_27_gen_4_firmware | v < o5nkt33a, o5nkt33a | o5nkt33a |
| lenovo thinkcentre_neo_30a_27_gen_3_firmware | v < o5nkt33a | o5nkt33a |
| lenovo thinkcentre_neo_30a_24_gen_4_firmware | v < o5nkt33a | o5nkt33a |
| lenovo thinkcentre_neo_30a_24_gen_3_firmware | v < o5nkt33a | o5nkt33a |
| lenovo thinkcentre_neo_30a_22_gen_4_firmware | v < o5nkt33a | o5nkt33a |
| lenovo thinkcentre_neo_30a_22_gen_3_firmware | v < o5nkt33a | o5nkt33a |
| lenovo thinkcentre_m920z_all-in-one_firmware | v < m1mkt56a | m1mkt56a |
| lenovo thinkcentre_m90t_gen_3_firmware | v < m40kt45a | m40kt45a |
| lenovo thinkcentre_m90t_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m90s_gen_3_firmware | v < m40kt45a | m40kt45a |
| lenovo thinkcentre_m90s_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m90q_tiny_firmware | No range specified | — |
| lenovo thinkcentre_m90q_gen_3_firmware | No range specified | — |
| lenovo thinkcentre_m90q_gen_2_firmware | No range specified | — |
| lenovo thinkcentre_m90a_pro_gen_3_firmware | v < m4hkt1da | m4hkt1da |
| lenovo thinkcentre_m90a_gen_3_firmware | v < m4ikt1da | m4ikt1da |
| lenovo thinkcentre_m90a_gen_2_firmware | v < m3lkt2aa | m3lkt2aa |
| lenovo thinkcentre_m90a_firmware | v < m2rkt57a | m2rkt57a |
| lenovo thinkcentre_m80t_gen_3_firmware | v < m40kt45a | m40kt45a |
| lenovo thinkcentre_m80t_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m80s_gen_3_firmware | v < m40kt45a | m40kt45a |
| lenovo thinkcentre_m80s_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m80q_gen_3_firmware | No range specified | — |
| lenovo thinkcentre_m80q_firmware | No range specified | — |
| lenovo thinkcentre_m75t_gen_2_firmware | No range specified | — |
| lenovo thinkcentre_m75s_gen_2_firmware | No range specified | — |
| lenovo thinkcentre_m75q_gen_2_firmware | No range specified | — |
| lenovo thinkcentre_m75n_firmware | v < m33kt29a | m33kt29a |
| lenovo thinkcentre_m70t_gen_3_firmware | v < m41kt45a | m41kt45a |
| lenovo thinkcentre_m70t_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m70s_gen_3_firmware | v < m41kt45a | m41kt45a |
| lenovo thinkcentre_m70s_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m70q_gen_2_firmware | No range specified | — |
| lenovo thinkcentre_m70q_firmware | No range specified | — |
| lenovo thinkcentre_m70c_firmware | v < m2vkt21a | m2vkt21a |
| lenovo thinkcentre_m70a_gen_3_firmware | No range specified | — |
| lenovo thinkcentre_m630e_firmware | v < m28kt42a | m28kt42a |
| lenovo thinkcentre_m625q_firmware | No range specified | — |
| lenovo loq_17irb8_firmware | v < m4ukt36a | m4ukt36a |
| lenovo legion_t5_26iab7_firmware | v < o5lkt2ba | o5lkt2ba |
| lenovo legion_t7-34imz5_firmware | v < o5fkt17a | o5fkt17a |
| lenovo legion_t7-34iaz7_firmware | v < o5hkt2ca | o5hkt2ca |
| lenovo legion_t7_34irz8_firmware | v < o5ukt1fa | o5ukt1fa |
| lenovo legion_t5_26irb8_firmware | v < o5tkt1ca | o5tkt1ca |
| lenovo ideacentre_mini_5-01imh05_firmware | No range specified | — |
| lenovo ideacentre_mini_5_01iaq7_firmware | v < o53kt10a | o53kt10a |
| lenovo ideacentre_gaming_5-14iob6_firmware | v < m3gkt3da | m3gkt3da |
| lenovo ideacentre_gaming_5-14acn6_firmware | No range specified | — |
| lenovo ideacentre_gaming_5_17iab7_firmware | v < m42kt46a | m42kt46a |
| lenovo ideacentre_gaming_5_17acn7_firmware | No range specified | — |
| lenovo ideacentre_g5-14imb05_firmware | v < o4hkt3ca | o4hkt3ca |
| lenovo ideacentre_g5-14amr05_firmware | v < o4zkt2ba | o4zkt2ba |
| lenovo ideacentre_creator_5-14iob6_firmware | v < m3gkt3da | m3gkt3da |
| lenovo ideacentre_aio_5_27iah7_firmware | v < o5rkt41a | o5rkt41a |
| lenovo ideacentre_aio_5_24iah7_firmware | v < o5rkt41a | o5rkt41a |
| lenovo ideacentre_aio_3-27itl6_firmware | v < o5akt34a | o5akt34a |
| lenovo ideacentre_aio_3-27imb05_firmware | v < o4rkt31a | o4rkt31a |
| lenovo ideacentre_aio_3-24itl6_firmware | v < o5akt34a | o5akt34a |
| lenovo ideacentre_aio_3-24imb05_firmware | v < o4rkt31a | o4rkt31a |
| lenovo ideacentre_aio_3-24iil5_firmware | v < o56kt24a | o56kt24a |
| lenovo ideacentre_aio_3-24alc6_firmware | v < o5bkt25a | o5bkt25a |
| lenovo ideacentre_aio_3-22itl6_firmware | v < o5akt34a | o5akt34a |
| lenovo ideacentre_aio_3-22imb05_firmware | v < o4rkt31a | o4rkt31a |
| lenovo ideacentre_aio_3-22iil5_firmware | v < o56kt24a | o56kt24a |
| lenovo ideacentre_aio_3_27iap7_firmware | v < o5nkt33a | o5nkt33a |
| lenovo ideacentre_aio_3_24iap7_firmware | v < o5nkt33a | o5nkt33a |
| lenovo ideacentre_aio_3_22iap7_firmware | v < o5nkt33a | o5nkt33a |
| lenovo ideacentre_aio_3_21itl7_firmware | v < o5akt34a | o5akt34a |
| lenovo ideacentre_5-14iob6_firmware | v < m3gkt3da | m3gkt3da |
| lenovo ideacentre_5-14imb05_firmware | v < o4hkt3ca | o4hkt3ca |
| lenovo v30a-22iml_firmware | v < m37kt31a | m37kt31a |
| lenovo v30a-22itl_firmware | v < o5akt34a | o5akt34a |
| lenovo v30a-24iml_firmware | v < m37kt31a | m37kt31a |
| lenovo v30a-24itl_firmware | v < o5akt34a | o5akt34a |
| lenovo v50a-22imb_firmware | v < m36kt32a | m36kt32a |
| lenovo v50a-24imb_firmware | v < m36kt32a | m36kt32a |
| lenovo v50s-07imb_firmware | v < m2vkt21a | m2vkt21a |
| lenovo v50t-13imb_firmware | v < o4hkt3ca | o4hkt3ca |
| lenovo v50t-13imh_firmware | v < m4pkt16a | m4pkt16a |
| lenovo v50t-13iob_firmware | v < m3gkt3da | m3gkt3da |
| lenovo v55t_gen_2_13acn_firmware | v < o5jkt2ca | o5jkt2ca |
| lenovo yoga_aio_7_27arh7_firmware | No range specified | — |
| lenovo yoga_aio_7-27arh6_firmware | No range specified | — |
| lenovo thinkedge_se30_firmware | No range specified | — |
| lenovo thinkstation_p920_workstation_firmware | No range specified | — |
| lenovo thinkstation_p720_workstation_firmware | No range specified | — |
| lenovo thinkstation_p520c_workstation_firmware | No range specified | — |
| lenovo thinkstation_p520_workstation_firmware | No range specified | — |
| lenovo thinkstation_p360_workstation_firmware | No range specified, v < s0ekt45a | s0ekt45a |
| lenovo thinkstation_p360_ultra_workstation_firmware | No range specified | — |
| lenovo thinkstation_p360_tiny_workstation_firmware | No range specified | — |
| lenovo thinkstation_p358_workstation_firmware | v < s0hkt23a | s0hkt23a |
| lenovo thinkstation_p350_workstation_firmware | No range specified | — |
| lenovo thinkstation_p350_tiny_workstation_firmware | No range specified | — |
| lenovo thinkstation_p348_workstation_firmware | No range specified | — |
| lenovo thinkstation_p340_workstation_firmware | v < s08kt55a | s08kt55a |
| lenovo thinkstation_p340_tiny_workstation_firmware | No range specified | — |
| lenovo thinkstation_p330_workstation_2nd_gen_firmware | v < m1vkt73a | m1vkt73a |
| lenovo thinkstation_p330_workstation_firmware | v < m1vkt73a | m1vkt73a |
| lenovo thinkstation_p320_workstation_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.