Out-of-bounds read in Lenovo BIOS
Priority LOW 31CWE-125Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00216 12th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Lenovo | BIOS | various | — | No fix listed | CNA |
- BIOS VendorLenovo Affected various Fixed in — No fix listed CNA
CPE configurations NVD · 123
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:ideacentre_c5-14imb05_firmware:*:*:*:*:*:*:*:* | before o4hkt3ca | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_c5-14imb05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_3-07ada05_firmware:*:*:*:*:*:*:*:* | before o4fkt39a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_3-07ada05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_3-07imb05_firmware:*:*:*:*:*:*:*:* | before m2vkt21a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_3-07imb05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_g5-14imb05_firmware:*:*:*:*:*:*:*:* | before o4hkt3ca | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_g5-14imb05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_5-14iob6_firmware:*:*:*:*:*:*:*:* | before m3gkt3da | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_5-14iob6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:ideacentre_c5-14imb05_firmware:*:*:*:*:*:*:*:* Versions before o4hkt3ca Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_c5-14imb05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_3-07ada05_firmware:*:*:*:*:*:*:*:* Versions before o4fkt39a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_3-07ada05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_3-07imb05_firmware:*:*:*:*:*:*:*:* Versions before m2vkt21a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_3-07imb05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_g5-14imb05_firmware:*:*:*:*:*:*:*:* Versions before o4hkt3ca Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_g5-14imb05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_5-14iob6_firmware:*:*:*:*:*:*:*:* Versions before m3gkt3da Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_5-14iob6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Show 113 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:lenovo:ideacentre_creator_5-14iob6_firmware:*:*:*:*:*:*:*:* | before m3gkt3da | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_creator_5-14iob6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_g5-14amr05_firmware:*:*:*:*:*:*:*:* | before o4zkt2ba | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_g5-14amr05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_gaming_5-14iob6_firmware:*:*:*:*:*:*:*:* | before m3gkt3da | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_gaming_5-14iob6:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_mini_5_01iaq7_firmware:*:*:*:*:*:*:*:* | before o53kt10a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_mini_5_01iaq7:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:ideacentre_mini_5-01imh05_firmware:*:*:*:*:*:*:*:* | before o4ekt1ba | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:ideacentre_mini_5-01imh05:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:legion_t7-34imz5_firmware:*:*:*:*:*:*:*:* | before o5fkt17a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:legion_t7-34imz5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m625q_firmware:*:*:*:*:*:*:*:* | before m1wkt52a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m625q:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m630e_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m630e:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70a_firmware:*:*:*:*:*:*:*:* | before m2skt29a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m920z_all-in-one_firmware:*:*:*:*:*:*:*:* | before m1mkt56a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m920z_all-in-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m920x_firmware:*:*:*:*:*:*:*:* | before m1ukt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m920x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m920t_firmware:*:*:*:*:*:*:*:* | before m1ukt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m920t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m920s_firmware:*:*:*:*:*:*:*:* | before m1ukt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m920s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m920q_firmware:*:*:*:*:*:*:*:* | before m1ukt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m920q:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m90t_firmware:*:*:*:*:*:*:*:* | before m2tkt55a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m90t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m90s_firmware:*:*:*:*:*:*:*:* | before m2tkt55a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m90s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m90q_tiny_firmware:*:*:*:*:*:*:*:* | before m2wkt5aa | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m90q_tiny:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m90a_firmware:*:*:*:*:*:*:*:* | before m2rkt57a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m90a:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m820z_all-in-one_firmware:*:*:*:*:*:*:*:* | before m1nkt62a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m820z_all-in-one:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m80t_firmware:*:*:*:*:*:*:*:* | before m2tkt55a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m80t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m80s_firmware:*:*:*:*:*:*:*:* | before m2tkt55a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m80s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m80q_firmware:*:*:*:*:*:*:*:* | before m2wkt5aa | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m80q:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m75t_gen_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m75s_gen_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m75q_gen_2_firmware:*:*:*:*:*:*:*:* | before m47kt30a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m75q_gen_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m75n_firmware:*:*:*:*:*:*:*:* | before m33kt27a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m75n:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m720t_firmware:*:*:*:*:*:*:*:* | before m1ukt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m720t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m720s_firmware:*:*:*:*:*:*:*:* | before m1ukt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m720s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m720q_firmware:*:*:*:*:*:*:*:* | before m1ukt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m720q:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70t_firmware:*:*:*:*:*:*:*:* | before m2tkt55a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70t:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70s_firmware:*:*:*:*:*:*:*:* | before m2tkt55a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70q_firmware:*:*:*:*:*:*:*:* | before m2wkt5aa | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70q:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkcentre_m70c_firmware:*:*:*:*:*:*:*:* | before m2vkt21a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkcentre_m70c:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50t-13iob_g2_firmware:*:*:*:*:*:*:*:* | before m3gkt3da | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50t-13iob_g2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v55t_gen_2_13acn_firmware:*:*:*:*:*:*:*:* | before o5jkt23a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v55t_gen_2_13acn:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50t-13imh_firmware:*:*:*:*:*:*:*:* | before m4pkt13a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50t-13imh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50t-13imb_firmware:*:*:*:*:*:*:*:* | before o4hkt3ca | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50t-13imb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50s-07imb_firmware:*:*:*:*:*:*:*:* | before m2vkt21a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50s-07imb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50a-24imb_firmware:*:*:*:*:*:*:*:* | before m36kt32a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50a-24imb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v50a-22imb_firmware:*:*:*:*:*:*:*:* | before m36kt32a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v50a-22imb:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v30a-24iml_firmware:*:*:*:*:*:*:*:* | before m37kt31a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v30a-24iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:v30a-22iml_firmware:*:*:*:*:*:*:*:* | before m37kt31a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:v30a-22iml:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkedge_se30_firmware:*:*:*:*:*:*:*:* | before m3fkt2da | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkedge_se30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p920_workstation_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p920_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p720_workstation_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p720_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p520c_workstation_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p520c_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p520_workstation_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p520_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p360_workstation_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p360_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p360_workstation_firmware:*:*:*:*:*:*:*:* | before s0ekt45a | Vulnerable | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p350_workstation_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p350_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p348_workstation_firmware:*:*:*:*:*:*:*:* | before m3kkt3ba | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p348_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p340_workstation_firmware:*:*:*:*:*:*:*:* | before s08kt55a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p340_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p340_tiny_workstation_firmware:*:*:*:*:*:*:*:* | before m2wkt5aa | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p340_tiny_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p330_workstation_2nd_gen_firmware:*:*:*:*:*:*:*:* | before m1vkt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p330_workstation_2nd_gen:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p330_workstation_firmware:*:*:*:*:*:*:*:* | before m1vkt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p330_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p330_tiny_workstation_firmware:*:*:*:*:*:*:*:* | before m1ukt72a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p330_tiny_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
| cpe:2.3:o:lenovo:thinkstation_p320_workstation_firmware:*:*:*:*:*:*:*:* | before s06kt64a | Vulnerable | Lenovo |
| cpe:2.3:h:lenovo:thinkstation_p320_workstation:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Lenovo |
- cpe:2.3:o:lenovo:ideacentre_creator_5-14iob6_firmware:*:*:*:*:*:*:*:* Versions before m3gkt3da Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_creator_5-14iob6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_g5-14amr05_firmware:*:*:*:*:*:*:*:* Versions before o4zkt2ba Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_g5-14amr05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_gaming_5-14iob6_firmware:*:*:*:*:*:*:*:* Versions before m3gkt3da Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_gaming_5-14iob6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_mini_5_01iaq7_firmware:*:*:*:*:*:*:*:* Versions before o53kt10a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_mini_5_01iaq7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:ideacentre_mini_5-01imh05_firmware:*:*:*:*:*:*:*:* Versions before o4ekt1ba Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:ideacentre_mini_5-01imh05:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:legion_t7-34imz5_firmware:*:*:*:*:*:*:*:* Versions before o5fkt17a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:legion_t7-34imz5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m625q_firmware:*:*:*:*:*:*:*:* Versions before m1wkt52a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m625q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m630e_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m630e:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70a_firmware:*:*:*:*:*:*:*:* Versions before m2skt29a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m920z_all-in-one_firmware:*:*:*:*:*:*:*:* Versions before m1mkt56a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m920z_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m920x_firmware:*:*:*:*:*:*:*:* Versions before m1ukt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m920x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m920t_firmware:*:*:*:*:*:*:*:* Versions before m1ukt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m920t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m920s_firmware:*:*:*:*:*:*:*:* Versions before m1ukt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m920s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m920q_firmware:*:*:*:*:*:*:*:* Versions before m1ukt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m920q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m90t_firmware:*:*:*:*:*:*:*:* Versions before m2tkt55a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m90t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m90s_firmware:*:*:*:*:*:*:*:* Versions before m2tkt55a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m90s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m90q_tiny_firmware:*:*:*:*:*:*:*:* Versions before m2wkt5aa Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m90q_tiny:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m90a_firmware:*:*:*:*:*:*:*:* Versions before m2rkt57a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m90a:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m820z_all-in-one_firmware:*:*:*:*:*:*:*:* Versions before m1nkt62a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m820z_all-in-one:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m80t_firmware:*:*:*:*:*:*:*:* Versions before m2tkt55a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m80t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m80s_firmware:*:*:*:*:*:*:*:* Versions before m2tkt55a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m80s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m80q_firmware:*:*:*:*:*:*:*:* Versions before m2wkt5aa Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m80q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m75t_gen_2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m75t_gen_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m75s_gen_2_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m75s_gen_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m75q_gen_2_firmware:*:*:*:*:*:*:*:* Versions before m47kt30a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m75q_gen_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m75n_firmware:*:*:*:*:*:*:*:* Versions before m33kt27a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m75n:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m720t_firmware:*:*:*:*:*:*:*:* Versions before m1ukt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m720t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m720s_firmware:*:*:*:*:*:*:*:* Versions before m1ukt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m720s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m720q_firmware:*:*:*:*:*:*:*:* Versions before m1ukt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m720q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70t_firmware:*:*:*:*:*:*:*:* Versions before m2tkt55a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70s_firmware:*:*:*:*:*:*:*:* Versions before m2tkt55a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70q_firmware:*:*:*:*:*:*:*:* Versions before m2wkt5aa Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkcentre_m70c_firmware:*:*:*:*:*:*:*:* Versions before m2vkt21a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkcentre_m70c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50t-13iob_g2_firmware:*:*:*:*:*:*:*:* Versions before m3gkt3da Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50t-13iob_g2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v55t_gen_2_13acn_firmware:*:*:*:*:*:*:*:* Versions before o5jkt23a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v55t_gen_2_13acn:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50t-13imh_firmware:*:*:*:*:*:*:*:* Versions before m4pkt13a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50t-13imh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50t-13imb_firmware:*:*:*:*:*:*:*:* Versions before o4hkt3ca Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50t-13imb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50s-07imb_firmware:*:*:*:*:*:*:*:* Versions before m2vkt21a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50s-07imb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50a-24imb_firmware:*:*:*:*:*:*:*:* Versions before m36kt32a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50a-24imb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v50a-22imb_firmware:*:*:*:*:*:*:*:* Versions before m36kt32a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v50a-22imb:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v30a-24iml_firmware:*:*:*:*:*:*:*:* Versions before m37kt31a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v30a-24iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:v30a-22iml_firmware:*:*:*:*:*:*:*:* Versions before m37kt31a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:v30a-22iml:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkedge_se30_firmware:*:*:*:*:*:*:*:* Versions before m3fkt2da Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkedge_se30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p920_workstation_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p920_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p720_workstation_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p720_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p520c_workstation_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p520c_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p520_workstation_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p520_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p360_workstation_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p360_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p360_workstation_firmware:*:*:*:*:*:*:*:* Versions before s0ekt45a Vulnerable ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p350_workstation_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p350_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p348_workstation_firmware:*:*:*:*:*:*:*:* Versions before m3kkt3ba Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p348_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p340_workstation_firmware:*:*:*:*:*:*:*:* Versions before s08kt55a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p340_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p340_tiny_workstation_firmware:*:*:*:*:*:*:*:* Versions before m2wkt5aa Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p340_tiny_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p330_workstation_2nd_gen_firmware:*:*:*:*:*:*:*:* Versions before m1vkt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p330_workstation_2nd_gen:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p330_workstation_firmware:*:*:*:*:*:*:*:* Versions before m1vkt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p330_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p330_tiny_workstation_firmware:*:*:*:*:*:*:*:* Versions before m1ukt72a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p330_tiny_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
- cpe:2.3:o:lenovo:thinkstation_p320_workstation_firmware:*:*:*:*:*:*:*:* Versions before s06kt64a Vulnerable ·Lenovo
- cpe:2.3:h:lenovo:thinkstation_p320_workstation:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Lenovo
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2023-45079
- 2026-10-03 Alias added: GHSA-xr7w-c4xp-gqc3
References
More Lenovo Ideacentre 3-07ada05 Firmware vulnerabilities
- TI-2022-23838 Out-of-bounds write in Lenovo ThinkStation BIOS CVSS 3.1HIGH 7.8
- TI-2023-24126 Out-of-bounds read in Lenovo BIOS CVSS 3.1MEDIUM 6.7
- TI-2023-24125 Out-of-bounds read in Lenovo BIOS CVSS 3.1MEDIUM 6.7
- TI-2023-24124 Out-of-bounds read in Lenovo BIOS CVSS 3.1MEDIUM 6.7
- TI-2023-24123 Out-of-bounds read in Lenovo BIOS CVSS 3.1MEDIUM 6.7
- TI-2023-23329 Buffer overflow in Lenovo Desktop BIOS CVSS 3.1MEDIUM 6.7
Sources
- CVE-2023-45079 · CVE Program
- CVE-2023-45079 · NVD
- FIRST EPSS
- GHSA-xr7w-c4xp-gqc3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences