medium6.4
CVE-2023-2290
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary co…
Impact
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Thinkpad E14 Firmware | Version 1.23 |
| Lenovo | Thinkpad E14 Gen 2 Firmware | Version 1.55 |
| Lenovo | Thinkpad E14 Gen 4 Firmware | Versions 1.18, 1.16 |
| Lenovo | Thinkpad E15 Firmware | Version 1.23 |
| Lenovo | Thinkpad E15 Gen 2 Firmware | Version 1.55 |
| Lenovo | Thinkpad E15 Gen 4 Firmware | Versions 1.18, 1.16 |
| Lenovo | Thinkpad E490 Firmware | Version 1.34 |
| Lenovo | Thinkpad E490s Firmware | Version 1.34 |
| Lenovo | Thinkpad E590 Firmware | Version 1.34 |
| Lenovo | Thinkpad L13 Gen 3 Firmware | Version 1.14 |
| Lenovo | Thinkpad L13 Yoga Gen 3 Firmware | Version 1.14 |
| Lenovo | Thinkpad L14 Firmware | Versions 1.2, 1.3, 1.48, 1.61, 1.26 |