A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.
Advisories
Source ID Title
EUVD EUVD EUVD-2023-33796 A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.
Fixes

Solution

Update system firmware to the version (or newer) indicated for your model in the Lenovo Product Security Advisory:  https://support.lenovo.com/us/en/product_security/LEN-106014


Workaround

No workaround given by the vendor.

History

Tue, 03 Dec 2024 19:15:00 +0000

Type Values Removed Values Added
First Time appeared Lenovo thinkpad E14 Gen2
CPEs cpe:2.3:h:lenovo:thinkpad_e14_gen2:-:*:*:*:*:*:*:*
Vendors & Products Lenovo thinkpad E14 Gen2
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Mon, 16 Sep 2024 15:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Mon, 16 Sep 2024 15:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-787

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-12-03T18:40:33.407Z

Reserved: 2023-04-25T19:41:49.164Z

Link: CVE-2023-2290

cve-icon Vulnrichment

Updated: 2024-08-02T06:19:14.606Z

cve-icon NVD

Status : Modified

Published: 2023-06-26T20:15:09.867

Modified: 2024-11-21T07:58:19.183

Link: CVE-2023-2290

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.