CVE-2023-4029
Severity Score
6.7
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Se ha identificado un desbordamiento de búfer en el controlador BoardUpdateAcpiDxe de algunos productos ThinkPad de Lenovo que puede permitir a un atacante con acceso local y privilegios elevados ejecutar código arbitrario.
*Credits:
Lenovo thanks Zichuan Li (@Ri7erLi) from Indiana University Bloomington for reporting this vulnerability.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-07-31 CVE Reserved
- 2023-08-17 CVE Published
- 2023-08-25 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-134879 | 2023-08-24 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Lenovo Search vendor "Lenovo" | K14 Type 21cu Firmware Search vendor "Lenovo" for product "K14 Type 21cu Firmware" | < 1.12 Search vendor "Lenovo" for product "K14 Type 21cu Firmware" and version " < 1.12" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | K14 Type 21cu Search vendor "Lenovo" for product "K14 Type 21cu" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | K14 Type 21cv Firmware Search vendor "Lenovo" for product "K14 Type 21cv Firmware" | < 1.12 Search vendor "Lenovo" for product "K14 Type 21cv Firmware" and version " < 1.12" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | K14 Type 21cv Search vendor "Lenovo" for product "K14 Type 21cv" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad S2 Yoga Gen 8 Firmware Search vendor "Lenovo" for product "Thinkpad S2 Yoga Gen 8 Firmware" | < 1.10 Search vendor "Lenovo" for product "Thinkpad S2 Yoga Gen 8 Firmware" and version " < 1.10" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad S2 Yoga Gen 8 Search vendor "Lenovo" for product "Thinkpad S2 Yoga Gen 8" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad E14 Gen 3 Firmware Search vendor "Lenovo" for product "Thinkpad E14 Gen 3 Firmware" | < 1.15 Search vendor "Lenovo" for product "Thinkpad E14 Gen 3 Firmware" and version " < 1.15" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad E14 Gen 3 Search vendor "Lenovo" for product "Thinkpad E14 Gen 3" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad E15 Gen 3 Firmware Search vendor "Lenovo" for product "Thinkpad E15 Gen 3 Firmware" | < 1.15 Search vendor "Lenovo" for product "Thinkpad E15 Gen 3 Firmware" and version " < 1.15" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad E15 Gen 3 Search vendor "Lenovo" for product "Thinkpad E15 Gen 3" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L13 Gen 2 Firmware Search vendor "Lenovo" for product "Thinkpad L13 Gen 2 Firmware" | < 1.30 Search vendor "Lenovo" for product "Thinkpad L13 Gen 2 Firmware" and version " < 1.30" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L13 Gen 2 Search vendor "Lenovo" for product "Thinkpad L13 Gen 2" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L13 Gen 3 Firmware Search vendor "Lenovo" for product "Thinkpad L13 Gen 3 Firmware" | < 1.19 Search vendor "Lenovo" for product "Thinkpad L13 Gen 3 Firmware" and version " < 1.19" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L13 Gen 3 Search vendor "Lenovo" for product "Thinkpad L13 Gen 3" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L13 Gen 4 Firmware Search vendor "Lenovo" for product "Thinkpad L13 Gen 4 Firmware" | < 1.10 Search vendor "Lenovo" for product "Thinkpad L13 Gen 4 Firmware" and version " < 1.10" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L13 Gen 4 Search vendor "Lenovo" for product "Thinkpad L13 Gen 4" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L13 Yoga Gen 4 Firmware Search vendor "Lenovo" for product "Thinkpad L13 Yoga Gen 4 Firmware" | < 1.10 Search vendor "Lenovo" for product "Thinkpad L13 Yoga Gen 4 Firmware" and version " < 1.10" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L13 Yoga Gen 4 Search vendor "Lenovo" for product "Thinkpad L13 Yoga Gen 4" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L13 Yoga Gen 2 Firmware Search vendor "Lenovo" for product "Thinkpad L13 Yoga Gen 2 Firmware" | < 1.30 Search vendor "Lenovo" for product "Thinkpad L13 Yoga Gen 2 Firmware" and version " < 1.30" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L13 Yoga Gen 2 Search vendor "Lenovo" for product "Thinkpad L13 Yoga Gen 2" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L13 Yoga Gen 3 Firmware Search vendor "Lenovo" for product "Thinkpad L13 Yoga Gen 3 Firmware" | < 1.19 Search vendor "Lenovo" for product "Thinkpad L13 Yoga Gen 3 Firmware" and version " < 1.19" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L13 Yoga Gen 3 Search vendor "Lenovo" for product "Thinkpad L13 Yoga Gen 3" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L14 Gen 2 Firmware Search vendor "Lenovo" for product "Thinkpad L14 Gen 2 Firmware" | < 1.28 Search vendor "Lenovo" for product "Thinkpad L14 Gen 2 Firmware" and version " < 1.28" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L14 Gen 2 Search vendor "Lenovo" for product "Thinkpad L14 Gen 2" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L14 Gen 3 Firmware Search vendor "Lenovo" for product "Thinkpad L14 Gen 3 Firmware" | < 1.23 Search vendor "Lenovo" for product "Thinkpad L14 Gen 3 Firmware" and version " < 1.23" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L14 Gen 3 Search vendor "Lenovo" for product "Thinkpad L14 Gen 3" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L14 Gen 4 Firmware Search vendor "Lenovo" for product "Thinkpad L14 Gen 4 Firmware" | < 1.06 Search vendor "Lenovo" for product "Thinkpad L14 Gen 4 Firmware" and version " < 1.06" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L14 Gen 4 Search vendor "Lenovo" for product "Thinkpad L14 Gen 4" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L15 Gen 2 Firmware Search vendor "Lenovo" for product "Thinkpad L15 Gen 2 Firmware" | < 1.28 Search vendor "Lenovo" for product "Thinkpad L15 Gen 2 Firmware" and version " < 1.28" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L15 Gen 2 Search vendor "Lenovo" for product "Thinkpad L15 Gen 2" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L15 Gen 3 Firmware Search vendor "Lenovo" for product "Thinkpad L15 Gen 3 Firmware" | < 1.23 Search vendor "Lenovo" for product "Thinkpad L15 Gen 3 Firmware" and version " < 1.23" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L15 Gen 3 Search vendor "Lenovo" for product "Thinkpad L15 Gen 3" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad L15 Gen 4 Firmware Search vendor "Lenovo" for product "Thinkpad L15 Gen 4 Firmware" | < 1.06 Search vendor "Lenovo" for product "Thinkpad L15 Gen 4 Firmware" and version " < 1.06" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad L15 Gen 4 Search vendor "Lenovo" for product "Thinkpad L15 Gen 4" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad P14s Gen 2 Firmware Search vendor "Lenovo" for product "Thinkpad P14s Gen 2 Firmware" | < 1.34 Search vendor "Lenovo" for product "Thinkpad P14s Gen 2 Firmware" and version " < 1.34" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad P14s Gen 2 Search vendor "Lenovo" for product "Thinkpad P14s Gen 2" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad T14 Gen 2 Firmware Search vendor "Lenovo" for product "Thinkpad T14 Gen 2 Firmware" | < 1.34 Search vendor "Lenovo" for product "Thinkpad T14 Gen 2 Firmware" and version " < 1.34" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad T14 Gen 2 Search vendor "Lenovo" for product "Thinkpad T14 Gen 2" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad T14s Gen 2 Firmware Search vendor "Lenovo" for product "Thinkpad T14s Gen 2 Firmware" | < 1.37 Search vendor "Lenovo" for product "Thinkpad T14s Gen 2 Firmware" and version " < 1.37" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad T14s Gen 2 Search vendor "Lenovo" for product "Thinkpad T14s Gen 2" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad S2 Gen 6 Firmware Search vendor "Lenovo" for product "Thinkpad S2 Gen 6 Firmware" | < 1.30 Search vendor "Lenovo" for product "Thinkpad S2 Gen 6 Firmware" and version " < 1.30" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad S2 Gen 6 Search vendor "Lenovo" for product "Thinkpad S2 Gen 6" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad S2 Gen 7 Firmware Search vendor "Lenovo" for product "Thinkpad S2 Gen 7 Firmware" | < 1.19 Search vendor "Lenovo" for product "Thinkpad S2 Gen 7 Firmware" and version " < 1.19" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad S2 Gen 7 Search vendor "Lenovo" for product "Thinkpad S2 Gen 7" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad S2 Gen 8 Firmware Search vendor "Lenovo" for product "Thinkpad S2 Gen 8 Firmware" | < 1.10 Search vendor "Lenovo" for product "Thinkpad S2 Gen 8 Firmware" and version " < 1.10" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad S2 Gen 8 Search vendor "Lenovo" for product "Thinkpad S2 Gen 8" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad S2 Yoga Gen 6 Firmware Search vendor "Lenovo" for product "Thinkpad S2 Yoga Gen 6 Firmware" | < 1.30 Search vendor "Lenovo" for product "Thinkpad S2 Yoga Gen 6 Firmware" and version " < 1.30" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad S2 Yoga Gen 6 Search vendor "Lenovo" for product "Thinkpad S2 Yoga Gen 6" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad S2 Yoga Gen 7 Firmware Search vendor "Lenovo" for product "Thinkpad S2 Yoga Gen 7 Firmware" | < 1.19 Search vendor "Lenovo" for product "Thinkpad S2 Yoga Gen 7 Firmware" and version " < 1.19" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad S2 Yoga Gen 7 Search vendor "Lenovo" for product "Thinkpad S2 Yoga Gen 7" | - | - |
Safe
|
| Lenovo Search vendor "Lenovo" | Thinkpad X13 Gen 2 Firmware Search vendor "Lenovo" for product "Thinkpad X13 Gen 2 Firmware" | < 1.37 Search vendor "Lenovo" for product "Thinkpad X13 Gen 2 Firmware" and version " < 1.37" | - |
Affected
| in | Lenovo Search vendor "Lenovo" | Thinkpad X13 Gen 2 Search vendor "Lenovo" for product "Thinkpad X13 Gen 2" | - | - |
Safe
|