Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-2290

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.4, requiring local system access to exploit but requires specific conditions to be met without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 170 products from lenovo, from lenovo, from lenovo and 167 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2023, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2023-06-26T20:15:09.867

Last Modified

2024-11-21T07:58:19.183

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.4 (MEDIUM)

Weaknesses

Type: Secondary
CWE-787
Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	lenovo	thinkpad_e14_firmware	1.23	Yes
Hardware	lenovo	thinkpad_e14	-	No
Operating System	lenovo	thinkpad_e14_gen_2_firmware	1.55	Yes
Hardware	lenovo	thinkpad_e14_gen_2	-	No
Operating System	lenovo	thinkpad_e14_gen_4_firmware	1.18	Yes
Hardware	lenovo	thinkpad_e14_gen_4	-	No
Operating System	lenovo	thinkpad_e14_gen_4_firmware	1.16	Yes
Hardware	lenovo	thinkpad_e14_gen_4	-	No
Operating System	lenovo	thinkpad_e15_firmware	1.23	Yes
Hardware	lenovo	thinkpad_e15	-	No
Operating System	lenovo	thinkpad_e15_gen_2_firmware	1.55	Yes
Hardware	lenovo	thinkpad_e15_gen_2	-	No
Operating System	lenovo	thinkpad_e15_gen_4_firmware	1.18	Yes
Hardware	lenovo	thinkpad_e15_gen_4	-	No
Operating System	lenovo	thinkpad_e15_gen_4_firmware	1.16	Yes
Hardware	lenovo	thinkpad_e15_gen_4	-	No
Operating System	lenovo	thinkpad_e490_firmware	1.34	Yes
Hardware	lenovo	thinkpad_e490	-	No
Operating System	lenovo	thinkpad_e490s_firmware	1.34	Yes
Hardware	lenovo	thinkpad_e490s	-	No
Operating System	lenovo	thinkpad_e590_firmware	1.34	Yes
Hardware	lenovo	thinkpad_e590	-	No
Operating System	lenovo	thinkpad_l13_gen_3_firmware	1.14	Yes
Hardware	lenovo	thinkpad_l13_gen_3	-	No
Operating System	lenovo	thinkpad_l13_yoga_gen_3_firmware	1.14	Yes
Hardware	lenovo	thinkpad_l13_yoga_gen_3	-	No
Operating System	lenovo	thinkpad_l14_firmware	1.2	Yes
Hardware	lenovo	thinkpad_l14	-	No
Operating System	lenovo	thinkpad_l14_firmware	1.3	Yes
Hardware	lenovo	thinkpad_l14	-	No
Operating System	lenovo	thinkpad_l14_firmware	1.48	Yes
Operating System	lenovo	thinkpad_l14_firmware	1.61	Yes
Hardware	lenovo	thinkpad_l14	-	No
Operating System	lenovo	thinkpad_l14_firmware	1.26	Yes
Hardware	lenovo	thinkpad_l14	-	No
Operating System	lenovo	thinkpad_l15_firmware	1.2	Yes
Hardware	lenovo	thinkpad_l15	-	No
Operating System	lenovo	thinkpad_l15_firmware	1.3	Yes
Hardware	lenovo	thinkpad_l15	-	No
Operating System	lenovo	thinkpad_l15_gen_2_firmware	1.48	Yes
Operating System	lenovo	thinkpad_l15_gen_2_firmware	1.61	Yes
Hardware	lenovo	thinkpad_l15_gen_2	-	No
Operating System	lenovo	thinkpad_l15_gen_3_firmware	1.26	Yes
Hardware	lenovo	thinkpad_l15_gen_3	-	No
Operating System	lenovo	thinkpad_l490_firmware	1.32	Yes
Hardware	lenovo	thinkpad_l490	-	No
Operating System	lenovo	thinkpad_l590_firmware	1.32	Yes
Hardware	lenovo	thinkpad_l590	-	No
Operating System	lenovo	thinkpad_p1_gen_2_firmware	1.46	Yes
Hardware	lenovo	thinkpad_p1_gen_2	-	No
Operating System	lenovo	thinkpad_p1_gen_3_firmware	1.27	Yes
Hardware	lenovo	thinkpad_p1_gen_3	-	No
Operating System	lenovo	thinkpad_p1_gen_4_firmware	1.22	Yes
Hardware	lenovo	thinkpad_p1_gen_4	-	No
Operating System	lenovo	thinkpad_p1_gen_5_firmware	1.16	Yes
Hardware	lenovo	thinkpad_p1_gen_5	-	No
Operating System	lenovo	thinkpad_p14s_gen_1_firmware	1.28	Yes
Hardware	lenovo	thinkpad_p14s_gen_1	-	No
Operating System	lenovo	thinkpad_p14s_gen_2_firmware	1.05	Yes
Operating System	lenovo	thinkpad_p14s_gen_2_firmware	1.55	Yes
Hardware	lenovo	thinkpad_p14s_gen_2	-	No
Operating System	lenovo	thinkpad_p14s_gen_2_firmware	1.34	Yes
Hardware	lenovo	thinkpad_p14s_gen_2	-	No
Operating System	lenovo	thinkpad_p14s_gen_3_firmware	1.11	Yes
Operating System	lenovo	thinkpad_p14s_gen_3_firmware	1.31	Yes
Hardware	lenovo	thinkpad_p14s_gen_3	-	No
Operating System	lenovo	thinkpad_p15_gen_1_firmware	1.32	Yes
Hardware	lenovo	thinkpad_p15_gen_1	-	No
Operating System	lenovo	thinkpad_p15_gen_2_firmware	1.25	Yes
Hardware	lenovo	thinkpad_p15_gen_2	-	No
Operating System	lenovo	thinkpad_p15s_gen_1_firmware	1.28	Yes
Hardware	lenovo	thinkpad_p15s_gen_1	-	No
Operating System	lenovo	thinkpad_p15s_gen_2_firmware	1.05	Yes
Operating System	lenovo	thinkpad_p15s_gen_2_firmware	1.55	Yes
Hardware	lenovo	thinkpad_p15s_gen_2	-	No
Operating System	lenovo	thinkpad_p15v_gen_1_firmware	1.32	Yes
Hardware	lenovo	thinkpad_p15v_gen_1	-	No
Operating System	lenovo	thinkpad_p15v_gen_2_firmware	1.19	Yes
Hardware	lenovo	thinkpad_p15v_gen_2	-	No
Operating System	lenovo	thinkpad_p15v_gen_3_firmware	1.15	Yes
Hardware	lenovo	thinkpad_p15v_gen_3	-	No
Operating System	lenovo	thinkpad_p16_gen_1_firmware	1.17	Yes
Hardware	lenovo	thinkpad_p16_gen_1	-	No
Operating System	lenovo	thinkpad_p16s_gen_1_firmware	1.11	Yes
Operating System	lenovo	thinkpad_p16s_gen_1_firmware	1.31	Yes
Hardware	lenovo	thinkpad_p16s_gen_1	-	No
Operating System	lenovo	thinkpad_p17_gen_1_firmware	1.32	Yes
Hardware	lenovo	thinkpad_p17_gen_1	-	No
Operating System	lenovo	thinkpad_p17_gen_2_firmware	1.25	Yes
Hardware	lenovo	thinkpad_p17_gen_2	-	No
Operating System	lenovo	thinkpad_p43s_firmware	1.21	Yes
Operating System	lenovo	thinkpad_p43s_firmware	1.79	Yes
Hardware	lenovo	thinkpad_p43s	-	No
Operating System	lenovo	thinkpad_p53_firmware	1.4	Yes
Hardware	lenovo	thinkpad_p53	-	No
Operating System	lenovo	thinkpad_p53s_firmware	1.21	Yes
Operating System	lenovo	thinkpad_p53s_firmware	1.79	Yes
Hardware	lenovo	thinkpad_p53s	-	No
Operating System	lenovo	thinkpad_p73_firmware	1.4	Yes
Hardware	lenovo	thinkpad_p73	-	No
Operating System	lenovo	thinkpad_t14_gen_1_firmware	1.28	Yes
Hardware	lenovo	thinkpad_t14_gen_1	-	No
Operating System	lenovo	thinkpad_t14_gen_1_firmware	1.28	Yes
Hardware	lenovo	thinkpad_t14_gen_1	-	No
Operating System	lenovo	thinkpad_t14_gen_2_firmware	1.05	Yes
Operating System	lenovo	thinkpad_t14_gen_2_firmware	1.55	Yes
Hardware	lenovo	thinkpad_t14_gen_2	-	No
Operating System	lenovo	thinkpad_t14_gen_2_firmware	1.34	Yes
Hardware	lenovo	thinkpad_t14_gen_2	-	No
Operating System	lenovo	thinkpad_t14_gen_3_firmware	1.11	Yes
Operating System	lenovo	thinkpad_t14_gen_3_firmware	1.31	Yes
Hardware	lenovo	thinkpad_t14_gen_3	-	No
Operating System	lenovo	thinkpad_t14s_firmware	1.26	Yes
Hardware	lenovo	thinkpad_t14s	-	No
Operating System	lenovo	thinkpad_t14s_gen_2_firmware	1.51	Yes
Hardware	lenovo	thinkpad_t14s_gen_2	-	No
Operating System	lenovo	thinkpad_t14s_gen_2_firmware	1.37	Yes
Hardware	lenovo	thinkpad_t14s_gen_2	-	No
Operating System	lenovo	thinkpad_t14s_gen_3_firmware	1.33	Yes
Hardware	lenovo	thinkpad_t14s_gen_3	-	No
Operating System	lenovo	thinkpad_t15_firmware	1.28	Yes
Hardware	lenovo	thinkpad_t15	-	No
Operating System	lenovo	thinkpad_t15_gen_2_firmware	1.05	Yes
Operating System	lenovo	thinkpad_t15_gen_2_firmware	1.55	Yes
Hardware	lenovo	thinkpad_t15_gen_2	-	No
Operating System	lenovo	thinkpad_t15g_gen_1_firmware	1.32	Yes
Hardware	lenovo	thinkpad_t15g_gen_1	-	No
Operating System	lenovo	thinkpad_t15g_gen_2_firmware	1.25	Yes
Hardware	lenovo	thinkpad_t15g_gen_2	-	No
Operating System	lenovo	thinkpad_t15p_gen_1_firmware	1.32	Yes
Hardware	lenovo	thinkpad_t15p_gen_1	-	No
Operating System	lenovo	thinkpad_t15p_gen_2_firmware	1.19	Yes
Hardware	lenovo	thinkpad_t15p_gen_2	-	No
Operating System	lenovo	thinkpad_t15p_gen_3_firmware	1.15	Yes
Hardware	lenovo	thinkpad_t15p_gen_3	-	No
Operating System	lenovo	thinkpad_t16_gen_1_firmware	1.11	Yes
Operating System	lenovo	thinkpad_t16_gen_1_firmware	1.31	Yes
Hardware	lenovo	thinkpad_t16_gen_1	-	No
Operating System	lenovo	thinkpad_t490_firmware	1.21	Yes
Operating System	lenovo	thinkpad_t490_firmware	1.79	Yes
Hardware	lenovo	thinkpad_t490	-	No
Operating System	lenovo	thinkpad_t490_firmware	1.21	Yes
Operating System	lenovo	thinkpad_t490_firmware	1.79	Yes
Hardware	lenovo	thinkpad_t490	-	No
Operating System	lenovo	thinkpad_t490_firmware	1.21	Yes
Operating System	lenovo	thinkpad_t490_firmware	1.79	Yes
Hardware	lenovo	thinkpad_t490	-	No
Operating System	lenovo	thinkpad_t490s_firmware	1.24	Yes
Operating System	lenovo	thinkpad_t490s_firmware	1.79	Yes
Hardware	lenovo	thinkpad_t490s	-	No
Operating System	lenovo	thinkpad_t590_firmware	1.21	Yes
Operating System	lenovo	thinkpad_t590_firmware	1.79	Yes
Hardware	lenovo	thinkpad_t590	-	No
Operating System	lenovo	thinkpad_thinkpad_r14_gen_2_firmware	1.55	Yes
Hardware	lenovo	thinkpad_thinkpad_r14_gen_2	-	No
Operating System	lenovo	thinkpad_thinkpad_r14_gen_4_firmware	1.18	Yes
Hardware	lenovo	thinkpad_thinkpad_r14_gen_4	-	No
Operating System	lenovo	thinkpad_thinkpad_s3_2nd_gen_firmware	1.23	Yes
Hardware	lenovo	thinkpad_thinkpad_s3_2nd_gen	-	No
Operating System	lenovo	thinkpad_x1_carbon_10th_gen_firmware	1.37	Yes
Hardware	lenovo	thinkpad_x1_carbon_10th_gen	-	No
Operating System	lenovo	thinkpad_x1_carbon_7th_gen_firmware	1.45	Yes
Operating System	lenovo	thinkpad_x1_carbon_7th_gen_firmware	1.56	Yes
Hardware	lenovo	thinkpad_x1_carbon_7th_gen	-	No
Operating System	lenovo	thinkpad_x1_carbon_7th_gen_firmware	1.45	Yes
Operating System	lenovo	thinkpad_x1_carbon_7th_gen_firmware	1.56	Yes
Hardware	lenovo	thinkpad_x1_carbon_7th_gen	-	No
Operating System	lenovo	thinkpad_x1_carbon_8th_gen_firmware	1.15	Yes
Operating System	lenovo	thinkpad_x1_carbon_8th_gen_firmware	1.30	Yes
Hardware	lenovo	thinkpad_x1_carbon_8th_gen	-	No
Operating System	lenovo	thinkpad_x1_carbon_9th_gen_firmware	1.59	Yes
Hardware	lenovo	thinkpad_x1_carbon_9th_gen	-	No
Operating System	lenovo	thinkpad_x1_extreme_2nd_gen_firmware	1.46	Yes
Hardware	lenovo	thinkpad_x1_extreme_2nd_gen	-	No
Operating System	lenovo	thinkpad_x1_extreme_3rd_gen_firmware	1.27	Yes
Hardware	lenovo	thinkpad_x1_extreme_3rd_gen	-	No
Operating System	lenovo	thinkpad_x1_extreme_4th_gen_firmware	1.22	Yes
Hardware	lenovo	thinkpad_x1_extreme_4th_gen	-	No
Operating System	lenovo	thinkpad_x1_extreme_gen_5_firmware	1.16	Yes
Hardware	lenovo	thinkpad_x1_extreme_gen_5	-	No
Operating System	lenovo	thinkpad_x1_nano_gen_1_firmware	1.55	Yes
Hardware	lenovo	thinkpad_x1_nano_gen_1	-	No
Operating System	lenovo	thinkpad_x1_nano_gen_2_firmware	1.18	Yes
Hardware	lenovo	thinkpad_x1_nano_gen_2	-	No
Operating System	lenovo	thinkpad_x1_titanium_firmware	1.24	Yes
Hardware	lenovo	thinkpad_x1_titanium	-	No
Operating System	lenovo	thinkpad_x1_yoga_4th_gen_firmware	1.45	Yes
Operating System	lenovo	thinkpad_x1_yoga_4th_gen_firmware	1.56	Yes
Hardware	lenovo	thinkpad_x1_yoga_4th_gen	-	No
Operating System	lenovo	thinkpad_x1_yoga_4th_gen_firmware	1.45	Yes
Operating System	lenovo	thinkpad_x1_yoga_4th_gen_firmware	1.56	Yes
Hardware	lenovo	thinkpad_x1_yoga_4th_gen	-	No
Operating System	lenovo	thinkpad_x1_yoga_5th_gen_firmware	1.15	Yes
Operating System	lenovo	thinkpad_x1_yoga_5th_gen_firmware	1.30	Yes
Hardware	lenovo	thinkpad_x1_yoga_5th_gen	-	No
Operating System	lenovo	thinkpad_x1_yoga_6th_gen_firmware	1.59	Yes
Hardware	lenovo	thinkpad_x1_yoga_6th_gen	-	No
Operating System	lenovo	thinkpad_x1_yoga_7th_gen_firmware	1.37	Yes
Hardware	lenovo	thinkpad_x1_yoga_7th_gen	-	No
Operating System	lenovo	thinkpad_x12_detachable_gen_1_firmware	1.28	Yes
Hardware	lenovo	thinkpad_x12_detachable_gen_1	-	No
Operating System	lenovo	thinkpad_x13_firmware	1.26	Yes
Hardware	lenovo	thinkpad_x13	-	No
Operating System	lenovo	thinkpad_x13_gen_2_firmware	1.51	Yes
Hardware	lenovo	thinkpad_x13_gen_2	-	No
Operating System	lenovo	thinkpad_x13_gen_2_firmware	1.37	Yes
Hardware	lenovo	thinkpad_x13_gen_2	-	No
Operating System	lenovo	thinkpad_x13_gen_3_firmware	1.33	Yes
Hardware	lenovo	thinkpad_x13_gen_3	-	No
Operating System	lenovo	thinkpad_x13_yoga_gen_1_firmware	1.45	Yes
Hardware	lenovo	thinkpad_x13_yoga_gen_1	-	No
Operating System	lenovo	thinkpad_x13_yoga_gen_2_firmware	1.4	Yes
Hardware	lenovo	thinkpad_x13_yoga_gen_2	-	No
Operating System	lenovo	thinkpad_x13_yoga_gen_3_firmware	1.09	Yes
Hardware	lenovo	thinkpad_x13_yoga_gen_3	-	No
Operating System	lenovo	thinkpad_x390_firmware	1.79_1.24	Yes
Hardware	lenovo	thinkpad_x390	-	No
Operating System	lenovo	thinkpad_x390_firmware	1.24	Yes
Operating System	lenovo	thinkpad_x390_firmware	1.79	Yes
Hardware	lenovo	thinkpad_x390	-	No
Operating System	lenovo	thinkpad_x390_yoga_firmware	1.95	Yes
Hardware	lenovo	thinkpad_x390_yoga	-	No
Operating System	lenovo	thinkpad_z13_gen_1_firmware	1.57	Yes
Hardware	lenovo	thinkpad_z13_gen_1	-	No
Operating System	lenovo	thinkpad_z16_gen_1_firmware	1.57	Yes
Hardware	lenovo	thinkpad_z16_gen_1	-	No

References

https://support.lenovo.com/us/en/product_security/LEN-106014 Vendor Advisory ([email protected])
https://support.lenovo.com/us/en/product_security/LEN-106014 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For lenovo's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.