A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables
Published Nov 8, 2023
6.7
MEDIUMCVSS 3.1
EPSS 0.22%
Description
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
Affected products
-
- Version variousStatusaffectedConstraints-
- Version
Configuration 1
- < o4hkt3ca
Running on/with
- n/a
Configuration 2
- < o4fkt39a
Running on/with
- n/a
Configuration 3
- < m2vkt21a
Running on/with
- n/a
Configuration 4
- < o4hkt3ca
Running on/with
- n/a
Configuration 5
- < m3gkt3da
Running on/with
- n/a
Configuration 6
- < m3gkt3da
Running on/with
- n/a
Configuration 7
- < o4zkt2ba
Running on/with
- n/a
Configuration 8
- < o4hkt3ca
Running on/with
- n/a
Configuration 9
- < m3gkt3da
Running on/with
- n/a
Configuration 10
- < o53kt10a
Running on/with
- n/a
Configuration 11
- < o4ekt1ba
Running on/with
- n/a
Configuration 12
- < o5fkt17a
Running on/with
- n/a
Configuration 13
- < m1wkt52a
Running on/with
- n/a
Configuration 14
- n/a
Running on/with
- n/a
Configuration 15
- < m2skt29a
Running on/with
- n/a
Configuration 16
- < m1mkt56a
Running on/with
- n/a
Configuration 17
- < m1ukt72a
Running on/with
- n/a
Configuration 18
- < m1ukt72a
Running on/with
- n/a
Configuration 19
- < m1ukt72a
Running on/with
- n/a
Configuration 20
- < m1ukt72a
Running on/with
- n/a
Configuration 21
- < m2tkt55a
Running on/with
- n/a
Configuration 22
- < m2tkt55a
Running on/with
- n/a
Configuration 23
- < m2wkt5aa
Running on/with
- n/a
Configuration 24
- < m2rkt57a
Running on/with
- n/a
Configuration 25
- < m1nkt62a
Running on/with
- n/a
Configuration 26
- < m2tkt55a
Running on/with
- n/a
Configuration 27
- < m2tkt55a
Running on/with
- n/a
Configuration 28
- < m2wkt5aa
Running on/with
- n/a
Configuration 29
- n/a
Running on/with
- n/a
Configuration 30
- n/a
Running on/with
- n/a
Configuration 31
- < m47kt30a
Running on/with
- n/a
Configuration 32
- < m33kt27a
Running on/with
- n/a
Configuration 33
- < m1ukt72a
Running on/with
- n/a
Configuration 34
- < m1ukt72a
Running on/with
- n/a
Configuration 35
- < m1ukt72a
Running on/with
- n/a
Configuration 36
- < m2tkt55a
Running on/with
- n/a
Configuration 37
- < m2tkt55a
Running on/with
- n/a
Configuration 38
- < m2wkt5aa
Running on/with
- n/a
Configuration 39
- < m2vkt21a
Running on/with
- n/a
Configuration 40
- < m3gkt3da
Running on/with
- n/a
Configuration 41
- < o5jkt23a
Running on/with
- n/a
Configuration 42
- < m4pkt13a
Running on/with
- n/a
Configuration 43
- < o4hkt3ca
Running on/with
- n/a
Configuration 44
- < m2vkt21a
Running on/with
- n/a
Configuration 45
- < m36kt32a
Running on/with
- n/a
Configuration 46
- < m36kt32a
Running on/with
- n/a
Configuration 47
- < m37kt31a
Running on/with
- n/a
Configuration 48
- < m37kt31a
Running on/with
- n/a
Configuration 49
- < m2vkt21a
Running on/with
- n/a
Configuration 50
- < m3fkt2da
Running on/with
- n/a
Configuration 51
Running on/with
- n/a
Configuration 52
Running on/with
- n/a
Configuration 53
Running on/with
- n/a
Configuration 54
Running on/with
- n/a
Configuration 55
Running on/with
- n/a
Configuration 56
- < s0ekt45a
Running on/with
- n/a
Configuration 57
Running on/with
- n/a
Configuration 58
- < m3kkt3ba
Running on/with
- n/a
Configuration 59
- < s08kt55a
Running on/with
- n/a
Configuration 60
- < m2wkt5aa
Running on/with
- n/a
Configuration 61
- < m1vkt72a
Running on/with
- n/a
Configuration 62
- < m1vkt72a
Running on/with
- n/a
Configuration 63
- < m1ukt72a
Running on/with
- n/a
Configuration 64
- < s06kt64a
Running on/with
- n/a
-
- Version variousStatusaffectedConstraints-
- Version
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Vendor solution
Update system firmware to the version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-141775
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
No CVSS v3.0 score for this CVE.
No CVSS v2.0 score for this CVE.
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
NoneAutomatable
NoTechnical Impact
TotalDecision
n/aAssessed Sep 4, 2024 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.
Score over time
2023–2026- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (5 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 2, 2026 | 0.22% (0.00216) | 10.85th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.22% (0.00216) | 11.83th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.04% (0.00041) | 9.58th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.04% (0.00042) | 5.07th | v3 (v2023.03.01) |
| Nov 9, 2023 | 0.04% (0.00042) | 5.73th | v3 (v2023.03.01) |
References (1)
- https://support.lenovo.com/us/en/product_security/LEN-141775 Vendor Advisory
| Link | Providers | Tags |
|---|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-141775 | Vendor Advisory |
Change history (0)
No recorded changes yet.