CVE-2023-43576 - A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code

Back Back to CVE browser

MEDIUM

A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code

Published Nov 8, 2023

6.7

MEDIUM

CVSS 3.1

EPSS 0.23%

Description

A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

Affected products

Vendor Lenovo Product Desktop BIOS Default
unaffected
- Version
  various
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Desktop BIOS

unaffected

Version	Status	Constraints
various	affected	-

Remediation

Vendor solution

Update system firmware to the version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-141775

Weaknesses (1)

CWE-120

Classic Buffer Overflow

References (1)

https://support.lenovo.com/us/en/product_security/LEN-141775
Vendor Advisory

Link	Providers	Tags
https://support.lenovo.com/us/en/product_security/LEN-141775		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Nov 8, 2023

Updated Aug 2, 2024

Reserved Sep 19, 2023

Link CVE-2023-43576

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-43576

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-43576