Lucene search

K
cve[email protected]CVE-2023-43575
HistoryNov 08, 2023 - 11:15 p.m.

CVE-2023-43575

2023-11-0823:15:09
CWE-120
web.nvd.nist.gov
15
cve-2023-43575
buffer overflow
ultrafunctiontable
lenovo desktop
nvd
security vulnerability

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

Affected configurations

NVD
Node
lenovoideacentre_c5-14imb05Match-
AND
lenovoideacentre_c5-14imb05_firmwareRange<o4hkt3ca
Node
lenovoideacentre_3-07ada05Match-
AND
lenovoideacentre_3-07ada05_firmwareRange<o4fkt39a
Node
lenovoideacentre_3-07imb05Match-
AND
lenovoideacentre_3-07imb05_firmwareRange<m2vkt21a
Node
lenovoideacentre_5_14iab7Match-
AND
lenovoideacentre_5_14iab7_firmwareRange<m42kt46a
Node
lenovoideacentre_5_14irb8Match-
AND
lenovoideacentre_5_14irb8_firmwareRange<m4ukt36a
Node
lenovoideacentre_5-14acn6Match-
AND
lenovoideacentre_5-14acn6_firmwareMatch-
Node
lenovoideacentre_t540-15ama_gMatch-
AND
lenovoideacentre_t540-15ama_g_firmwareMatch-
Node
lenovothinkcentre_neo_70t_gen_3Match-
AND
lenovothinkcentre_neo_70t_gen_3_firmwareRange<m40kt45a
Node
lenovothinkcentre_neo_50t_gen_3_firmwareRange<m42kt46a
AND
lenovothinkcentre_neo_50t_gen_3Match-
Node
lenovothinkcentre_neo_50a_24_gen_4_firmwareRange<o5xkt18a
AND
lenovothinkcentre_neo_50a_24_gen_4Match-
Node
lenovothinkcentre_neo_50a_24_gen_3_firmwareRange<o5rkt41a
AND
lenovothinkcentre_neo_50a_24_gen_3Match-
Node
lenovothinkcentre_neo_30a_27_gen_4_firmwareRange<o5nkt33a
OR
lenovothinkcentre_neo_30a_27_gen_4_firmwareMatcho5nkt33a
AND
lenovothinkcentre_neo_30a_27_gen_4Match-
Node
lenovothinkcentre_neo_30a_27_gen_3_firmwareRange<o5nkt33a
AND
lenovothinkcentre_neo_30a_27_gen_3Match-
Node
lenovothinkcentre_neo_30a_24_gen_4_firmwareRange<o5nkt33a
AND
lenovothinkcentre_neo_30a_24_gen_4Match-
Node
lenovothinkcentre_neo_30a_24_gen_3_firmwareRange<o5nkt33a
AND
lenovothinkcentre_neo_30a_24_gen_3Match-
Node
lenovothinkcentre_neo_30a_22_gen_4_firmwareRange<o5nkt33a
AND
lenovothinkcentre_neo_30a_22_gen_4Match-
Node
lenovothinkcentre_neo_30a_22_gen_3_firmwareRange<o5nkt33a
AND
lenovothinkcentre_neo_30a_22_gen_3Match-
Node
lenovothinkcentre_m920z_all-in-one_firmwareRange<m1mkt56a
AND
lenovothinkcentre_m920z_all-in-oneMatch-
Node
lenovothinkcentre_m90t_gen_3_firmwareRange<m40kt45a
AND
lenovothinkcentre_m90t_gen_3Match-
Node
lenovothinkcentre_m90t_firmwareRange<m2tkt55a
AND
lenovothinkcentre_m90tMatch-
Node
lenovothinkcentre_m90s_gen_3_firmwareRange<m40kt45a
AND
lenovothinkcentre_m90s_gen_3Match-
Node
lenovothinkcentre_m90s_firmwareRange<m2tkt55a
AND
lenovothinkcentre_m90sMatch-
Node
lenovothinkcentre_m90q_tiny_firmwareMatch-
AND
lenovothinkcentre_m90q_tinyMatch-
Node
lenovothinkcentre_m90q_gen_3_firmwareMatch-
AND
lenovothinkcentre_m90q_gen_3Match-
Node
lenovothinkcentre_m90q_gen_2Match-
AND
lenovothinkcentre_m90q_gen_2_firmwareMatch-
Node
lenovothinkcentre_m90a_pro_gen_3_firmwareRange<m4hkt1da
AND
lenovothinkcentre_m90a_pro_gen_3Match-
Node
lenovothinkcentre_m90a_gen_3_firmwareRange<m4ikt1da
AND
lenovothinkcentre_m90a_gen_3Match-
Node
lenovothinkcentre_m90a_gen_2_firmwareRange<m3lkt2aa
AND
lenovothinkcentre_m90a_gen_2Match-
Node
lenovothinkcentre_m90a_firmwareRange<m2rkt57a
AND
lenovothinkcentre_m90aMatch-
Node
lenovothinkcentre_m80t_gen_3_firmwareRange<m40kt45a
AND
lenovothinkcentre_m80t_gen_3Match-
Node
lenovothinkcentre_m80t_firmwareRange<m2tkt55a
AND
lenovothinkcentre_m80tMatch-
Node
lenovothinkcentre_m80s_gen_3_firmwareRange<m40kt45a
AND
lenovothinkcentre_m80s_gen_3Match-
Node
lenovothinkcentre_m80s_firmwareRange<m2tkt55a
AND
lenovothinkcentre_m80sMatch-
Node
lenovothinkcentre_m80q_gen_3_firmwareMatch-
AND
lenovothinkcentre_m80q_gen_3Match-
Node
lenovothinkcentre_m80q_firmwareMatch-
AND
lenovothinkcentre_m80qMatch-
Node
lenovothinkcentre_m75t_gen_2_firmwareMatch-
AND
lenovothinkcentre_m75t_gen_2Match-
Node
lenovothinkcentre_m75s_gen_2_firmwareMatch-
AND
lenovothinkcentre_m75s_gen_2Match-
Node
lenovothinkcentre_m75q_gen_2_firmwareMatch-
AND
lenovothinkcentre_m75q_gen_2Match-
Node
lenovothinkcentre_m75n_firmwareRange<m33kt29a
AND
lenovothinkcentre_m75nMatch-
Node
lenovothinkcentre_m70t_gen_3_firmwareRange<m41kt45a
AND
lenovothinkcentre_m70t_gen_3Match-
Node
lenovothinkcentre_m70t_firmwareRange<m2tkt55a
AND
lenovothinkcentre_m70tMatch-
Node
lenovothinkcentre_m70s_gen_3_firmwareRange<m41kt45a
AND
lenovothinkcentre_m70s_gen_3Match-
Node
lenovothinkcentre_m70s_firmwareRange<m2tkt55a
AND
lenovothinkcentre_m70sMatch-
Node
lenovothinkcentre_m70q_gen_2_firmwareMatch-
AND
lenovothinkcentre_m70q_gen_2Match-
Node
lenovothinkcentre_m70q_firmwareMatch-
AND
lenovothinkcentre_m70qMatch-
Node
lenovothinkcentre_m70c_firmwareRange<m2vkt21a
AND
lenovothinkcentre_m70cMatch-
Node
lenovothinkcentre_m70a_gen_3_firmwareMatch-
AND
lenovothinkcentre_m70a_gen_3Match-
Node
lenovothinkcentre_m630e_firmwareRange<m28kt42a
AND
lenovothinkcentre_m630eMatch-
Node
lenovothinkcentre_m625q_firmwareMatch-
AND
lenovothinkcentre_m625qMatch-
Node
lenovoloq_17irb8_firmwareRange<m4ukt36a
AND
lenovoloq_17irb8Match-
Node
lenovolegion_t5_26iab7_firmwareRange<o5lkt2ba
AND
lenovolegion_t5_26iab7Match-
Node
lenovolegion_t7-34imz5_firmwareRange<o5fkt17a
AND
lenovolegion_t7-34imz5Match-
Node
lenovolegion_t7-34iaz7_firmwareRange<o5hkt2ca
AND
lenovolegion_t7-34iaz7Match-
Node
lenovolegion_t7_34irz8_firmwareRange<o5ukt1fa
AND
lenovolegion_t7_34irz8Match-
Node
lenovolegion_t5_26irb8_firmwareRange<o5tkt1ca
AND
lenovolegion_t5_26irb8Match-
Node
lenovoideacentre_mini_5-01imh05_firmwareMatch-
AND
lenovoideacentre_mini_5-01imh05Match-
Node
lenovoideacentre_mini_5_01iaq7_firmwareRange<o53kt10a
AND
lenovoideacentre_mini_5_01iaq7Match-
Node
lenovoideacentre_gaming_5-14iob6_firmwareRange<m3gkt3da
AND
lenovoideacentre_gaming_5-14iob6Match-
Node
lenovoideacentre_gaming_5-14acn6_firmwareMatch-
AND
lenovoideacentre_gaming_5-14acn6Match-
Node
lenovoideacentre_gaming_5_17iab7_firmwareRange<m42kt46a
AND
lenovoideacentre_gaming_5_17iab7Match-
Node
lenovoideacentre_gaming_5_17acn7_firmwareMatch-
AND
lenovoideacentre_gaming_5_17acn7Match-
Node
lenovoideacentre_g5-14imb05_firmwareRange<o4hkt3ca
AND
lenovoideacentre_g5-14imb05Match-
Node
lenovoideacentre_g5-14amr05_firmwareRange<o4zkt2ba
AND
lenovoideacentre_g5-14amr05Match-
Node
lenovoideacentre_creator_5-14iob6_firmwareRange<m3gkt3da
AND
lenovoideacentre_creator_5-14iob6Match-
Node
lenovoideacentre_aio_5_27iah7_firmwareRange<o5rkt41a
AND
lenovoideacentre_aio_5_27iah7Match-
Node
lenovoideacentre_aio_5_24iah7_firmwareRange<o5rkt41a
AND
lenovoideacentre_aio_5_24iah7Match-
Node
lenovoideacentre_aio_3-27itl6_firmwareRange<o5akt34a
AND
lenovoideacentre_aio_3-27itl6Match-
Node
lenovoideacentre_aio_3-27imb05_firmwareRange<o4rkt31a
AND
lenovoideacentre_aio_3-27imb05Match-
Node
lenovoideacentre_aio_3-24itl6_firmwareRange<o5akt34a
AND
lenovoideacentre_aio_3-24itl6Match-
Node
lenovoideacentre_aio_3-24imb05_firmwareRange<o4rkt31a
AND
lenovoideacentre_aio_3-24imb05Match-
Node
lenovoideacentre_aio_3-24iil5_firmwareRange<o56kt24a
AND
lenovoideacentre_aio_3-24iil5Match-
Node
lenovoideacentre_aio_3-24alc6_firmwareRange<o5bkt25a
AND
lenovoideacentre_aio_3-24alc6Match-
Node
lenovoideacentre_aio_3-22itl6_firmwareRange<o5akt34a
AND
lenovoideacentre_aio_3-22itl6Match-
Node
lenovoideacentre_aio_3-22imb05_firmwareRange<o4rkt31a
AND
lenovoideacentre_aio_3-22imb05Match-
Node
lenovoideacentre_aio_3-22iil5_firmwareRange<o56kt24a
AND
lenovoideacentre_aio_3-22iil5Match-
Node
lenovoideacentre_aio_3_27iap7_firmwareRange<o5nkt33a
AND
lenovoideacentre_aio_3_27iap7Match-
Node
lenovoideacentre_aio_3_24iap7_firmwareRange<o5nkt33a
AND
lenovoideacentre_aio_3_24iap7Match-
Node
lenovoideacentre_aio_3_22iap7_firmwareRange<o5nkt33a
AND
lenovoideacentre_aio_3_22iap7Match-
Node
lenovoideacentre_aio_3_21itl7_firmwareRange<o5akt34a
AND
lenovoideacentre_aio_3_21itl7Match-
Node
lenovoideacentre_5-14iob6_firmwareRange<m3gkt3da
AND
lenovoideacentre_5-14iob6Match-
Node
lenovoideacentre_5-14imb05_firmwareRange<o4hkt3ca
AND
lenovoideacentre_5-14imb05Match-
Node
lenovov30a-22iml_firmwareRange<m37kt31a
AND
lenovov30a-22imlMatch-
Node
lenovov30a-22itl_firmwareRange<o5akt34a
AND
lenovov30a-22itlMatch-
Node
lenovov30a-24iml_firmwareRange<m37kt31a
AND
lenovov30a-24imlMatch-
Node
lenovov30a-24itl_firmwareRange<o5akt34a
AND
lenovov30a-24itlMatch-
Node
lenovov50a-22imb_firmwareRange<m36kt32a
AND
lenovov50a-22imbMatch-
Node
lenovov50a-24imb_firmwareRange<m36kt32a
AND
lenovov50a-24imbMatch-
Node
lenovov50s-07imb_firmwareRange<m2vkt21a
AND
lenovov50s-07imbMatch-
Node
lenovov50t-13imb_firmwareRange<o4hkt3ca
AND
lenovov50t-13imbMatch-
Node
lenovov50t-13imh_firmwareRange<m4pkt16a
AND
lenovov50t-13imhMatch-
Node
lenovov50t-13iob_firmwareRange<m3gkt3da
AND
lenovov50t-13iobMatch-
Node
lenovov55t_gen_2_13acn_firmwareRange<o5jkt2ca
AND
lenovov55t_gen_2_13acnMatch-
Node
lenovoyoga_aio_7_27arh7_firmwareMatch-
AND
lenovoyoga_aio_7_27arh7Match-
Node
lenovoyoga_aio_7-27arh6_firmwareMatch-
AND
lenovoyoga_aio_7-27arh6Match-
Node
lenovothinkedge_se30_firmwareMatch-
AND
lenovothinkedge_se30Match-
Node
lenovothinkstation_p920_workstation_firmwareMatch-
AND
lenovothinkstation_p920_workstationMatch-
Node
lenovothinkstation_p720_workstation_firmwareMatch-
AND
lenovothinkstation_p720_workstationMatch-
Node
lenovothinkstation_p520c_workstation_firmwareMatch-
AND
lenovothinkstation_p520c_workstationMatch-
Node
lenovothinkstation_p520_workstation_firmwareMatch-
AND
lenovothinkstation_p520_workstationMatch-
Node
lenovothinkstation_p360_workstation_firmwareMatch-
AND
lenovothinkstation_p360_workstationMatch-
Node
lenovothinkstation_p360_workstation_firmwareRange<s0ekt45a
AND
lenovothinkstation_p360_workstationMatch-
Node
lenovothinkstation_p360_ultra_workstation_firmwareMatch-
AND
lenovothinkstation_p360_ultra_workstationMatch-
Node
lenovothinkstation_p360_tiny_workstation_firmwareMatch-
AND
lenovothinkstation_p360_tiny_workstationMatch-
Node
lenovothinkstation_p358_workstation_firmwareRange<s0hkt23a
AND
lenovothinkstation_p358_workstationMatch-
Node
lenovothinkstation_p350_workstation_firmwareMatch-
AND
lenovothinkstation_p350_workstationMatch-
Node
lenovothinkstation_p350_tiny_workstation_firmwareMatch-
AND
lenovothinkstation_p350_tiny_workstationMatch-
Node
lenovothinkstation_p348_workstation_firmwareMatch-
AND
lenovothinkstation_p348_workstationMatch-
Node
lenovothinkstation_p340_workstation_firmwareRange<s08kt55a
AND
lenovothinkstation_p340_workstationMatch-
Node
lenovothinkstation_p340_tiny_workstation_firmwareMatch-
AND
lenovothinkstation_p340_tiny_workstationMatch-
Node
lenovothinkstation_p330_workstation_2nd_gen_firmwareRange<m1vkt73a
AND
lenovothinkstation_p330_workstation_2nd_genMatch-
Node
lenovothinkstation_p330_workstation_firmwareRange<m1vkt73a
AND
lenovothinkstation_p330_workstationMatch-
Node
lenovothinkstation_p320_workstation_firmwareMatch-
AND
lenovothinkstation_p320_workstationMatch-

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Desktop BIOS",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2023-43575