CVE-2023-43571 - A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code

Back Back to CVE browser

MEDIUM

A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code

Published Nov 8, 2023

6.7

MEDIUM

CVSS 3.1

EPSS 0.23%

Description

A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

Affected products

Vendor Lenovo Product Desktop BIOS Default
unaffected
- Version
  various
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Desktop BIOS

unaffected

Version	Status	Constraints
various	affected	-

Vendor Lenovo Product Desktop Bios Default
n/a
- Version
  various
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Desktop Bios

n/a

Version	Status	Constraints
various	affected	-

Remediation

Vendor solution

Update system firmware to the version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-141775

Weaknesses (1)

CWE-120

Classic Buffer Overflow