medium4.4
CVE-2023-43568
A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to…
Impact
A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideacentre C5-14imb05 Firmware | before o4hkt3ca |
| Lenovo | Ideacentre 3-07ada05 Firmware | before o4fkt39a |
| Lenovo | Ideacentre 3-07imb05 Firmware | before m2vkt21a |
| Lenovo | Ideacentre 5 14iab7 Firmware | before m42kt46a |
| Lenovo | Ideacentre 5 14irb8 Firmware | before m4ukt36a |
| Lenovo | Ideacentre 5-14acn6 Firmware | All versions |
| Lenovo | Ideacentre T540-15ama G Firmware | All versions |
| Lenovo | Thinkcentre Neo 70t Gen 3 Firmware | before m40kt45a |
| Lenovo | Thinkcentre Neo 50t Gen 3 Firmware | before m42kt46a |
| Lenovo | Thinkcentre Neo 50a 24 Gen 4 Firmware | before o5xkt18a |
| Lenovo | Thinkcentre Neo 50a 24 Gen 3 Firmware | before o5rkt41a |
| Lenovo | Thinkcentre Neo 30a 27 Gen 4 Firmware | before o5nkt33a Version o5nkt33a |