CVE-2023-45075
Medium
Description
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
SeverityMedium
CVSS6.7
Exploit probability—
ProductLenovo Ideacentre C5-14imb05 Firmware
PublishedNov 8, 2023
First seenNov 8, 2023
Weakness typeCWE-125Out-of-bounds read
How to fix
Update
- lenovo ideacentre_c5-14imb05_firmwareo4hkt3ca or later
- lenovo ideacentre_3-07ada05_firmwareo4fkt39a or later
- lenovo ideacentre_3-07imb05_firmwarem2vkt21a or later
- lenovo ideacentre_g5-14imb05_firmwareo4hkt3ca or later
- lenovo ideacentre_5-14iob6_firmwarem3gkt3da or later
- lenovo ideacentre_creator_5-14iob6_firmwarem3gkt3da or later
- lenovo ideacentre_g5-14amr05_firmwareo4zkt2ba or later
- lenovo ideacentre_gaming_5-14iob6_firmwarem3gkt3da or later
- lenovo ideacentre_mini_5_01iaq7_firmwareo53kt10a or later
- lenovo ideacentre_mini_5-01imh05_firmwareo4ekt1ba or later
- lenovo legion_t7-34imz5_firmwareo5fkt17a or later
- lenovo thinkcentre_m625q_firmwarem1wkt52a or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lenovo ideacentre_c5-14imb05_firmware | v < o4hkt3ca | o4hkt3ca |
| lenovo ideacentre_3-07ada05_firmware | v < o4fkt39a | o4fkt39a |
| lenovo ideacentre_3-07imb05_firmware | v < m2vkt21a | m2vkt21a |
| lenovo ideacentre_g5-14imb05_firmware | v < o4hkt3ca | o4hkt3ca |
| lenovo ideacentre_5-14iob6_firmware | v < m3gkt3da | m3gkt3da |
| lenovo ideacentre_creator_5-14iob6_firmware | v < m3gkt3da | m3gkt3da |
| lenovo ideacentre_g5-14amr05_firmware | v < o4zkt2ba | o4zkt2ba |
| lenovo ideacentre_gaming_5-14iob6_firmware | v < m3gkt3da | m3gkt3da |
| lenovo ideacentre_mini_5_01iaq7_firmware | v < o53kt10a | o53kt10a |
| lenovo ideacentre_mini_5-01imh05_firmware | v < o4ekt1ba | o4ekt1ba |
| lenovo legion_t7-34imz5_firmware | v < o5fkt17a | o5fkt17a |
| lenovo thinkcentre_m625q_firmware | v < m1wkt52a | m1wkt52a |
| lenovo thinkcentre_m630e_firmware | No range specified | — |
| lenovo thinkcentre_m70a_firmware | v < m2skt29a | m2skt29a |
| lenovo thinkcentre_m920z_all-in-one_firmware | v < m1mkt56a | m1mkt56a |
| lenovo thinkcentre_m920x_firmware | v < m1ukt72a | m1ukt72a |
| lenovo thinkcentre_m920t_firmware | v < m1ukt72a | m1ukt72a |
| lenovo thinkcentre_m920s_firmware | v < m1ukt72a | m1ukt72a |
| lenovo thinkcentre_m920q_firmware | v < m1ukt72a | m1ukt72a |
| lenovo thinkcentre_m90t_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m90s_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m90q_tiny_firmware | v < m2wkt5aa | m2wkt5aa |
| lenovo thinkcentre_m90a_firmware | v < m2rkt57a | m2rkt57a |
| lenovo thinkcentre_m820z_all-in-one_firmware | v < m1nkt62a | m1nkt62a |
| lenovo thinkcentre_m80t_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m80s_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m80q_firmware | v < m2wkt5aa | m2wkt5aa |
| lenovo thinkcentre_m75t_gen_2_firmware | No range specified | — |
| lenovo thinkcentre_m75s_gen_2_firmware | No range specified | — |
| lenovo thinkcentre_m75q_gen_2_firmware | v < m47kt30a | m47kt30a |
| lenovo thinkcentre_m75n_firmware | v < m33kt27a | m33kt27a |
| lenovo thinkcentre_m720t_firmware | v < m1ukt72a | m1ukt72a |
| lenovo thinkcentre_m720s_firmware | v < m1ukt72a | m1ukt72a |
| lenovo thinkcentre_m720q_firmware | v < m1ukt72a | m1ukt72a |
| lenovo thinkcentre_m70t_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m70s_firmware | v < m2tkt55a | m2tkt55a |
| lenovo thinkcentre_m70q_firmware | v < m2wkt5aa | m2wkt5aa |
| lenovo thinkcentre_m70c_firmware | v < m2vkt21a | m2vkt21a |
| lenovo v50t-13iob_g2_firmware | v < m3gkt3da | m3gkt3da |
| lenovo v55t_gen_2_13acn_firmware | v < o5jkt23a | o5jkt23a |
| lenovo v50t-13imh_firmware | v < m4pkt13a | m4pkt13a |
| lenovo v50t-13imb_firmware | v < o4hkt3ca | o4hkt3ca |
| lenovo v50s-07imb_firmware | v < m2vkt21a | m2vkt21a |
| lenovo v50a-24imb_firmware | v < m36kt32a | m36kt32a |
| lenovo v50a-22imb_firmware | v < m36kt32a | m36kt32a |
| lenovo v30a-24iml_firmware | v < m37kt31a | m37kt31a |
| lenovo v30a-22iml_firmware | v < m37kt31a | m37kt31a |
| lenovo thinkedge_se30_firmware | v < m3fkt2da | m3fkt2da |
| lenovo thinkstation_p920_workstation_firmware | No range specified | — |
| lenovo thinkstation_p720_workstation_firmware | No range specified | — |
| lenovo thinkstation_p520c_workstation_firmware | No range specified | — |
| lenovo thinkstation_p520_workstation_firmware | No range specified | — |
| lenovo thinkstation_p360_workstation_firmware | No range specified, v < s0ekt45a | s0ekt45a |
| lenovo thinkstation_p350_workstation_firmware | No range specified | — |
| lenovo thinkstation_p348_workstation_firmware | v < m3kkt3ba | m3kkt3ba |
| lenovo thinkstation_p340_workstation_firmware | v < s08kt55a | s08kt55a |
| lenovo thinkstation_p340_tiny_workstation_firmware | v < m2wkt5aa | m2wkt5aa |
| lenovo thinkstation_p330_workstation_2nd_gen_firmware | v < m1vkt72a | m1vkt72a |
| lenovo thinkstation_p330_workstation_firmware | v < m1vkt72a | m1vkt72a |
| lenovo thinkstation_p330_tiny_workstation_firmware | v < m1ukt72a | m1ukt72a |
| lenovo thinkstation_p320_workstation_firmware | v < s06kt64a | s06kt64a |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.