6.7
Medium
CVE-2023-43570 A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker…
Description
A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Desktop BIOS | Versions not published |
Other CVEs of Desktop BIOS
The 16 CVEs of Desktop BIOS →
CVE-2023-43577
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker…
6.7
Medium
CVE-2023-43576
A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker…
6.7
Medium
CVE-2023-43575
A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local…
6.7
Medium
CVE-2023-43574
A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may…
4.4
Medium