Code injection

2023-06-2620:15:00

PRIOn knowledge base

www.prio-n.com

lenovoflashdeviceinterface

smi handler

code injection

local access

elevated privileges

arbitrary code

vulnerability

nvd

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.

CPENameOperatorVersion
thinkpad_e14_firmwareeq1.23
thinkpad_e14_gen_2_firmwareeq1.55
thinkpad_e14_gen_4_firmwareeq1.18
thinkpad_e14_gen_4_firmwareeq1.16
thinkpad_e15_firmwareeq1.23
thinkpad_e15_gen_2_firmwareeq1.55
thinkpad_e15_gen_4_firmwareeq1.18
thinkpad_e15_gen_4_firmwareeq1.16
thinkpad_e490_firmwareeq1.34
thinkpad_e490s_firmwareeq1.34

Name	Operator	Version
thinkpad_e14_firmware	eq	1.23
thinkpad_e14_gen_2_firmware	eq	1.55
thinkpad_e14_gen_4_firmware	eq	1.18
thinkpad_e14_gen_4_firmware	eq	1.16
thinkpad_e15_firmware	eq	1.23
thinkpad_e15_gen_2_firmware	eq	1.55
thinkpad_e15_gen_4_firmware	eq	1.18
thinkpad_e15_gen_4_firmware	eq	1.16
thinkpad_e490_firmware	eq	1.34
thinkpad_e490s_firmware	eq	1.34