6.4
Medium
CVE-2023-2290 A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and…
Description
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ThinkPad | Versions not published | |
| thinkpad_e14 | 1.23 | No fix stated |
| thinkpad_e14_gen2 | 1.22 | No fix stated |
| thinkpad_e15 | 1.23 | No fix stated |
| thinkpad_e490 | 1.34 | No fix stated |
Other CVEs of ThinkPad
The 9 CVEs of ThinkPad →
CVE-2023-5078
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated…
6.7
Medium
CVE-2022-48189
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local…
6.7
Medium
CVE-2022-4574
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local…
6.7
Medium
CVE-2023-4030
A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause…
8.4
High