CVSS: 6.7EPSS: 0%CPEs: 40EXPL: 0CVE-2023-5078
https://notcve.org/view.php?id=CVE-2023-5078
08 Nov 2023 — A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware. Se informó una vulnerabilidad en algunos BIOS de ThinkPad que podría permitir que un atacante físico o local con privilegios elevados altere el firmware del BIOS. • https://support.lenovo.com/us/en/product_security/LEN-141775 • CWE-665: Improper Initialization CWE-1419: Incorrect Initialization of Resource •
CVSS: 6.7EPSS: 0%CPEs: 52EXPL: 0CVE-2023-4029
https://notcve.org/view.php?id=CVE-2023-4029
17 Aug 2023 — A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code. Se ha identificado un desbordamiento de búfer en el controlador BoardUpdateAcpiDxe de algunos productos ThinkPad de Lenovo que puede permitir a un atacante con acceso local y privilegios elevados ejecutar código arbitrario. • https://support.lenovo.com/us/en/product_security/LEN-134879 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 6.7EPSS: 0%CPEs: 226EXPL: 0CVE-2023-2290
https://notcve.org/view.php?id=CVE-2023-2290
26 Jun 2023 — A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code. • https://support.lenovo.com/us/en/product_security/LEN-106014 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •