Multiple vulnerabilities in Lenovo Insyde BIOS firmware
| Risk | Low |
| Patch available | NO |
| Number of vulnerabilities | 6 |
| CVE-ID | CVE-2023-22614 CVE-2023-22616 CVE-2023-22613 CVE-2023-22615 CVE-2023-22612 CVE-2022-24350 |
| CWE-ID | CWE-119 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software Subscribe |
ideapad D330-10IGL Hardware solutions / Firmware IdeaPad 1 14IAU7 Hardware solutions / Firmware IdeaPad 1 15IAU7 Hardware solutions / Firmware IdeaPad 3 14IAU7 Hardware solutions / Firmware IdeaPad 3 15IAU7 Hardware solutions / Firmware IdeaPad 3 17IAU7 Hardware solutions / Firmware IdeaPad 3-14ARE05 Hardware solutions / Firmware IdeaPad 3-15ARE05 Hardware solutions / Firmware IdeaPad 3-17ARE05 Hardware solutions / Firmware IdeaPad 3-17ITL6 Hardware solutions / Firmware IdeaPad 5 14IAL7 Hardware solutions / Firmware IdeaPad 5 15IAL7 Hardware solutions / Firmware IdeaPad 5 Pro 14IAP7 Hardware solutions / Firmware IdeaPad 5 Pro 16IAH7 Hardware solutions / Firmware IdeaPad 5-14ITL05 Hardware solutions / Firmware IdeaPad Duet 3 10IGL5 Hardware solutions / Firmware IdeaPad Duet 5 12IAU7 Hardware solutions / Firmware IdeaPad Gaming 3 15IAH7 Hardware solutions / Firmware IdeaPad Gaming 3 16IAH7 Hardware solutions / Firmware IdeaPad Gaming 3-15IHU6 Hardware solutions / Firmware ideapad L3-15ITL6 Hardware solutions / Firmware Lenovo Legion 5 15IAH7 Hardware solutions / Firmware Lenovo Legion 5 15IAH7H Hardware solutions / Firmware Lenovo Legion 5 Pro 16IA H7 Hardware solutions / Firmware Lenovo Legion 5 Pro 16IAH7H Hardware solutions / Firmware Lenovo Legion 5 Pro-16ITH6 Hardware solutions / Firmware Lenovo Legion 5 Pro-16ITH6H Hardware solutions / Firmware Lenovo Legion 5-15ITH6 Hardware solutions / Firmware Lenovo Legion 5-15ITH6H Hardware solutions / Firmware Lenovo Legion 5-17ITH6 Hardware solutions / Firmware Lenovo Legion 5-17ITH6H Hardware solutions / Firmware Legion 7 16IAX7 Hardware solutions / Firmware Lenovo Legion 7-16ITHg6 Hardware solutions / Firmware Lenovo Legion S7 16IAH7 Hardware solutions / Firmware Lenovo S14 G2 ITL Hardware solutions / Firmware Lenovo S14 G3 IAP Hardware solutions / Firmware Lenovo Slim 7 14IAP7 Hardware solutions / Firmware Lenovo Slim 7 14IRP8 Hardware solutions / Firmware Lenovo Slim 7 Carbon 13IAP7 Hardware solutions / Firmware Lenovo Slim 7 Carbon 13IRP8 Hardware solutions / Firmware Lenovo Slim 7 ProX 14IAH7 Hardware solutions / Firmware Lenovo Slim 9 14IAP7 Hardware solutions / Firmware Lenovo V14 G3 IAP Hardware solutions / Firmware Lenovo V15 G3 IAP Hardware solutions / Firmware Lenovo V17 G3 IAP Hardware solutions / Firmware ideapad S540-13ARE Hardware solutions / Firmware ideapad S540-13ITL Hardware solutions / Firmware Lenovo Slim 7 16IAH7 Hardware solutions / Firmware IdeaPad Slim 7 Pro-14IHU5 Hardware solutions / Firmware ideapad Slim 7-14ARE05 Hardware solutions / Firmware ideapad Slim 7-14ITL05 Hardware solutions / Firmware ideapad Slim 7-15ITL05 Hardware solutions / Firmware ThinkBook 13x ITG Hardware solutions / Firmware ThinkBook 14 G2 ITL Hardware solutions / Firmware ThinkBook 14 G3 ITL Hardware solutions / Firmware ThinkBook 14 G4 IAP Hardware solutions / Firmware ThinkBook 14 G4+ IAP Hardware solutions / Firmware ThinkBook 14s Yoga G2 IAP Hardware solutions / Firmware ThinkBook 14s Yoga ITL Hardware solutions / Firmware ThinkBook 15 G2 ITL Hardware solutions / Firmware ThinkBook 15 G3 ITL Hardware solutions / Firmware ThinkBook 15 G4 IAP Hardware solutions / Firmware ThinkBook 15P G2 ITH Hardware solutions / Firmware ThinkBook 16 G4+ IAP Hardware solutions / Firmware ThinkBook Plus G2 ITG Hardware solutions / Firmware ThinkBook Plus G3 IAP Hardware solutions / Firmware Lenovo V14 G2-ITL Hardware solutions / Firmware Len ovo V14-ARE Hardware solutions / Firmware Lenovo V15 G2-ITL Hardware solutions / Firmware Lenovo V17 G2-ITL Hardware solutions / Firmware Yoga 7 14IAL7 Hardware solutions / Firmware Yoga 7 16IAH7 Hardware solutions / Firmware IdeaPad Yoga 7 16IAP7 Hardware solutions / Firmware ideapad Yoga 7-14ITL5 Hardware solutions / Firmware ideapad Yoga 7-15ITL5 Hardware solutions / Firmware IdeaPad Yoga 9 14IAP7 Hardware solutions / Firmware Yoga 9 14IRP8 Hardware solutions / Firmware Yoga Duet 7-13IML05 Hardware solutions / Firmware Yoga Duet 7-13ITL6 Hardware solutions / Firmware Yoga Duet 7-13ITL6-L TE Hardware solutions / Firmware Yoga Slim 6 14IAP8 Hardware solutions / Firmware Yoga Slim 6 14IRP8 Hardware solutions / Firmware Yoga Slim 7 Carbon 13IAP7 Hardware solutions / Firmware Yoga Slim 7 Carbon 13IRP8 Hardware solutions / Firmware ideapad Yoga Slim 7 Carbon 13ITL5 Hardware solutions / Firmware Yoga Slim 7 Pro 14IAH7 Hardware solutions / Firmware IdeaPad Yoga Slim 7 Pro 14IAP7 Hardware solutions / Firmware IdeaPad Yoga Slim 7 Pro 16IAH7 Hardware solutions / Firmware ideapad Yoga Slim 7 Pro-1 4IHU5 Hardware solutions / Firmware ideapad Yoga Slim 7 Pro-14IHU5 O Hardware solutions / Firmware ideapad Yoga Slim 7 Pro-14ITL5 Hardware solutions / Firmware Yoga Slim 7 ProX 14IAH7 Hardware solutions / Firmware ideapad Yoga Slim 7-13ITL05 Hardware solutions / Firmware ideapad Yoga Slim 7-14ARE05 Hardware solutions / Firmware ideapad Yoga Slim 7-14ITL05 Hardware solutions / Firmware ideapad Yoga Slim 7-15ITL05 Hardware solutions / Firmware Yoga Slim 9 14IAP7 Hardware solutions / Firmware ideapad 3-14 ITL05 Hardware solutions / Firmware ideapad 3-14ITL6 Hardware solutions / Firmware ideapad 3-15ITL05 Hardware solutions / Firmware ideapad 3-15ITL6 Hardware solutions / Firmware ideapad 5 Pro-14ITL6 Hardware solutions / Firmware ideapad 5 Pro-16IHU6 Hardware solutions / Firmware ideapad 5-15ARE05 Hardware solutions / Firmware |
| Vendor | Lenovo |
Security Bulletin
This security bulletin contains information about 6 vulnerabilities.
1) Buffer overflow
EUVDB-ID: #VU75023
Risk: Low
CVSSv3.1: 8.1 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2023-22614
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Insyde BIOS code. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
The vendor plans to release patches in August 2023.
ideapad D330-10IGL: All versions
IdeaPad 1 14IAU7: All versions
IdeaPad 1 15IAU7: All versions
IdeaPad 3 14IAU7: All versions
IdeaPad 3 15IAU7: All versions
IdeaPad 3 17IAU7: All versions
IdeaPad 3-14ARE05: All versions
IdeaPad 3-15ARE05: All versions
IdeaPad 3-17ARE05: All versions
IdeaPad 3-17ITL6: All versions
IdeaPad 5 14IAL7: All versions
IdeaPad 5 15IAL7: All versions
IdeaPad 5 Pro 14IAP7: All versions
IdeaPad 5 Pro 16IAH7: All versions
IdeaPad 5-14ITL05: All versions
IdeaPad Duet 3 10IGL5: All versions
IdeaPad Duet 5 12IAU7: All versions
IdeaPad Gaming 3 15IAH7: All versions
IdeaPad Gaming 3 16IAH7: All versions
IdeaPad Gaming 3-15IHU6: All versions
ideapad L3-15ITL6: All versions
Lenovo Legion 5 15IAH7: All versions
Lenovo Legion 5 15IAH7H: All versions
Lenovo Legion 5 Pro 16IA H7: All versions
Lenovo Legion 5 Pro 16IAH7H: All versions
Lenovo Legion 5 Pro-16ITH6: All versions
Lenovo Legion 5 Pro-16ITH6H: All versions
Lenovo Legion 5-15ITH6: All versions
Lenovo Legion 5-15ITH6H: All versions
Lenovo Legion 5-17ITH6: All versions
Lenovo Legion 5-17ITH6H: All versions
Legion 7 16IAX7: All versions
Lenovo Legion 7-16ITHg6: All versions
Lenovo Legion S7 16IAH7: All versions
Lenovo S14 G2 ITL: All versions
Lenovo S14 G3 IAP: All versions
Lenovo Slim 7 14IAP7: All versions
Lenovo Slim 7 14IRP8: All versions
Lenovo Slim 7 Carbon 13IAP7: All versions
Lenovo Slim 7 Carbon 13IRP8: All versions
Lenovo Slim 7 ProX 14IAH7: All versions
Lenovo Slim 9 14IAP7: All versions
Lenovo V14 G3 IAP: All versions
Lenovo V15 G3 IAP: All versions
Lenovo V17 G3 IAP: All versions
ideapad S540-13ARE: All versions
ideapad S540-13ITL: All versions
Lenovo Slim 7 16IAH7: All versions
IdeaPad Slim 7 Pro-14IHU5: All versions
ideapad Slim 7-14ARE05: All versions
ideapad Slim 7-14ITL05: All versions
ideapad Slim 7-15ITL05: All versions
ThinkBook 13x ITG: All versions
ThinkBook 14 G2 ITL: All versions
ThinkBook 14 G3 ITL: All versions
ThinkBook 14 G4 IAP: All versions
ThinkBook 14 G4+ IAP: All versions
ThinkBook 14s Yoga G2 IAP: All versions
ThinkBook 14s Yoga ITL: All versions
ThinkBook 15 G2 ITL: All versions
ThinkBook 15 G3 ITL: All versions
ThinkBook 15 G4 IAP: All versions
ThinkBook 15P G2 ITH: All versions
ThinkBook 16 G4+ IAP: All versions
ThinkBook Plus G2 ITG: All versions
ThinkBook Plus G3 IAP: All versions
Lenovo V14 G2-ITL: All versions
Len ovo V14-ARE: All versions
Lenovo V15 G2-ITL: All versions
Lenovo V17 G2-ITL: All versions
Yoga 7 14IAL7: All versions
Yoga 7 16IAH7: All versions
IdeaPad Yoga 7 16IAP7: All versions
ideapad Yoga 7-14ITL5: All versions
ideapad Yoga 7-15ITL5: All versions
IdeaPad Yoga 9 14IAP7: All versions
Yoga 9 14IRP8: All versions
Yoga Duet 7-13IML05: All versions
Yoga Duet 7-13ITL6: All versions
Yoga Duet 7-13ITL6-L TE: All versions
Yoga Slim 6 14IAP8: All versions
Yoga Slim 6 14IRP8: All versions
Yoga Slim 7 Carbon 13IAP7: All versions
Yoga Slim 7 Carbon 13IRP8: All versions
ideapad Yoga Slim 7 Carbon 13ITL5: All versions
Yoga Slim 7 Pro 14IAH7: All versions
IdeaPad Yoga Slim 7 Pro 14IAP7: All versions
IdeaPad Yoga Slim 7 Pro 16IAH7: All versions
ideapad Yoga Slim 7 Pro-1 4IHU5: All versions
ideapad Yoga Slim 7 Pro-14IHU5 O: All versions
ideapad Yoga Slim 7 Pro-14ITL5: All versions
Yoga Slim 7 ProX 14IAH7: All versions
ideapad Yoga Slim 7-13ITL05: All versions
ideapad Yoga Slim 7-14ARE05: All versions
ideapad Yoga Slim 7-14ITL05: All versions
ideapad Yoga Slim 7-15ITL05: All versions
Yoga Slim 9 14IAP7: All versions
ideapad 3-14 ITL05: All versions
ideapad 3-14ITL6: All versions
ideapad 3-15ITL05: All versions
ideapad 3-15ITL6: All versions
ideapad 5 Pro-14ITL6: All versions
ideapad 5 Pro-16IHU6: All versions
ideapad 5-15ARE05: All versions
CPE2.3- cpe:2.3:h:lenovo:ideapad_d330-10igl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_17iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_15ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad _5_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_5_12iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3-15ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_l3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16ia h7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:legion_7_16iax7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_7-16ithg6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_s7 16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g3 _iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7_pro-14ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_13x_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_g2_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_16_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:len ovo_v14-are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7_16iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-15itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_9_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13iml05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6-l te:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14iap8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_carbon_13itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_pro_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-1 4ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14ihu5_o:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-13itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14 itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-15are05:*:*:*:*:*:*:*:*
http://support.lenovo.com/us/en/product_security/LEN-115634
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Buffer overflow
EUVDB-ID: #VU75024
Risk: Low
CVSSv3.1: 8.1 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2023-22616
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Insyde BIOS code. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
The vendor plans to release patches in August 2023.
ideapad D330-10IGL: All versions
IdeaPad 1 14IAU7: All versions
IdeaPad 1 15IAU7: All versions
IdeaPad 3 14IAU7: All versions
IdeaPad 3 15IAU7: All versions
IdeaPad 3 17IAU7: All versions
IdeaPad 3-14ARE05: All versions
IdeaPad 3-15ARE05: All versions
IdeaPad 3-17ARE05: All versions
IdeaPad 3-17ITL6: All versions
IdeaPad 5 14IAL7: All versions
IdeaPad 5 15IAL7: All versions
IdeaPad 5 Pro 14IAP7: All versions
IdeaPad 5 Pro 16IAH7: All versions
IdeaPad 5-14ITL05: All versions
IdeaPad Duet 3 10IGL5: All versions
IdeaPad Duet 5 12IAU7: All versions
IdeaPad Gaming 3 15IAH7: All versions
IdeaPad Gaming 3 16IAH7: All versions
IdeaPad Gaming 3-15IHU6: All versions
ideapad L3-15ITL6: All versions
Lenovo Legion 5 15IAH7: All versions
Lenovo Legion 5 15IAH7H: All versions
Lenovo Legion 5 Pro 16IA H7: All versions
Lenovo Legion 5 Pro 16IAH7H: All versions
Lenovo Legion 5 Pro-16ITH6: All versions
Lenovo Legion 5 Pro-16ITH6H: All versions
Lenovo Legion 5-15ITH6: All versions
Lenovo Legion 5-15ITH6H: All versions
Lenovo Legion 5-17ITH6: All versions
Lenovo Legion 5-17ITH6H: All versions
Legion 7 16IAX7: All versions
Lenovo Legion 7-16ITHg6: All versions
Lenovo Legion S7 16IAH7: All versions
Lenovo S14 G2 ITL: All versions
Lenovo S14 G3 IAP: All versions
Lenovo Slim 7 14IAP7: All versions
Lenovo Slim 7 14IRP8: All versions
Lenovo Slim 7 Carbon 13IAP7: All versions
Lenovo Slim 7 Carbon 13IRP8: All versions
Lenovo Slim 7 ProX 14IAH7: All versions
Lenovo Slim 9 14IAP7: All versions
Lenovo V14 G3 IAP: All versions
Lenovo V15 G3 IAP: All versions
Lenovo V17 G3 IAP: All versions
ideapad S540-13ARE: All versions
ideapad S540-13ITL: All versions
Lenovo Slim 7 16IAH7: All versions
IdeaPad Slim 7 Pro-14IHU5: All versions
ideapad Slim 7-14ARE05: All versions
ideapad Slim 7-14ITL05: All versions
ideapad Slim 7-15ITL05: All versions
ThinkBook 13x ITG: All versions
ThinkBook 14 G2 ITL: All versions
ThinkBook 14 G3 ITL: All versions
ThinkBook 14 G4 IAP: All versions
ThinkBook 14 G4+ IAP: All versions
ThinkBook 14s Yoga G2 IAP: All versions
ThinkBook 14s Yoga ITL: All versions
ThinkBook 15 G2 ITL: All versions
ThinkBook 15 G3 ITL: All versions
ThinkBook 15 G4 IAP: All versions
ThinkBook 15P G2 ITH: All versions
ThinkBook 16 G4+ IAP: All versions
ThinkBook Plus G2 ITG: All versions
ThinkBook Plus G3 IAP: All versions
Lenovo V14 G2-ITL: All versions
Len ovo V14-ARE: All versions
Lenovo V15 G2-ITL: All versions
Lenovo V17 G2-ITL: All versions
Yoga 7 14IAL7: All versions
Yoga 7 16IAH7: All versions
IdeaPad Yoga 7 16IAP7: All versions
ideapad Yoga 7-14ITL5: All versions
ideapad Yoga 7-15ITL5: All versions
IdeaPad Yoga 9 14IAP7: All versions
Yoga 9 14IRP8: All versions
Yoga Duet 7-13IML05: All versions
Yoga Duet 7-13ITL6: All versions
Yoga Duet 7-13ITL6-L TE: All versions
Yoga Slim 6 14IAP8: All versions
Yoga Slim 6 14IRP8: All versions
Yoga Slim 7 Carbon 13IAP7: All versions
Yoga Slim 7 Carbon 13IRP8: All versions
ideapad Yoga Slim 7 Carbon 13ITL5: All versions
Yoga Slim 7 Pro 14IAH7: All versions
IdeaPad Yoga Slim 7 Pro 14IAP7: All versions
IdeaPad Yoga Slim 7 Pro 16IAH7: All versions
ideapad Yoga Slim 7 Pro-1 4IHU5: All versions
ideapad Yoga Slim 7 Pro-14IHU5 O: All versions
ideapad Yoga Slim 7 Pro-14ITL5: All versions
Yoga Slim 7 ProX 14IAH7: All versions
ideapad Yoga Slim 7-13ITL05: All versions
ideapad Yoga Slim 7-14ARE05: All versions
ideapad Yoga Slim 7-14ITL05: All versions
ideapad Yoga Slim 7-15ITL05: All versions
Yoga Slim 9 14IAP7: All versions
ideapad 3-14 ITL05: All versions
ideapad 3-14ITL6: All versions
ideapad 3-15ITL05: All versions
ideapad 3-15ITL6: All versions
ideapad 5 Pro-14ITL6: All versions
ideapad 5 Pro-16IHU6: All versions
ideapad 5-15ARE05: All versions
CPE2.3- cpe:2.3:h:lenovo:ideapad_d330-10igl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_17iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_15ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad _5_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_5_12iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3-15ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_l3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16ia h7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:legion_7_16iax7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_7-16ithg6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_s7 16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g3 _iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7_pro-14ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_13x_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_g2_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_16_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:len ovo_v14-are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7_16iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-15itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_9_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13iml05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6-l te:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14iap8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_carbon_13itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_pro_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-1 4ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14ihu5_o:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-13itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14 itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-15are05:*:*:*:*:*:*:*:*
http://support.lenovo.com/us/en/product_security/LEN-115634
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Buffer overflow
EUVDB-ID: #VU75025
Risk: Low
CVSSv3.1: 8.1 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2023-22613
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Insyde BIOS code. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
The vendor plans to release patches in August 2023.
ideapad D330-10IGL: All versions
IdeaPad 1 14IAU7: All versions
IdeaPad 1 15IAU7: All versions
IdeaPad 3 14IAU7: All versions
IdeaPad 3 15IAU7: All versions
IdeaPad 3 17IAU7: All versions
IdeaPad 3-14ARE05: All versions
IdeaPad 3-15ARE05: All versions
IdeaPad 3-17ARE05: All versions
IdeaPad 3-17ITL6: All versions
IdeaPad 5 14IAL7: All versions
IdeaPad 5 15IAL7: All versions
IdeaPad 5 Pro 14IAP7: All versions
IdeaPad 5 Pro 16IAH7: All versions
IdeaPad 5-14ITL05: All versions
IdeaPad Duet 3 10IGL5: All versions
IdeaPad Duet 5 12IAU7: All versions
IdeaPad Gaming 3 15IAH7: All versions
IdeaPad Gaming 3 16IAH7: All versions
IdeaPad Gaming 3-15IHU6: All versions
ideapad L3-15ITL6: All versions
Lenovo Legion 5 15IAH7: All versions
Lenovo Legion 5 15IAH7H: All versions
Lenovo Legion 5 Pro 16IA H7: All versions
Lenovo Legion 5 Pro 16IAH7H: All versions
Lenovo Legion 5 Pro-16ITH6: All versions
Lenovo Legion 5 Pro-16ITH6H: All versions
Lenovo Legion 5-15ITH6: All versions
Lenovo Legion 5-15ITH6H: All versions
Lenovo Legion 5-17ITH6: All versions
Lenovo Legion 5-17ITH6H: All versions
Legion 7 16IAX7: All versions
Lenovo Legion 7-16ITHg6: All versions
Lenovo Legion S7 16IAH7: All versions
Lenovo S14 G2 ITL: All versions
Lenovo S14 G3 IAP: All versions
Lenovo Slim 7 14IAP7: All versions
Lenovo Slim 7 14IRP8: All versions
Lenovo Slim 7 Carbon 13IAP7: All versions
Lenovo Slim 7 Carbon 13IRP8: All versions
Lenovo Slim 7 ProX 14IAH7: All versions
Lenovo Slim 9 14IAP7: All versions
Lenovo V14 G3 IAP: All versions
Lenovo V15 G3 IAP: All versions
Lenovo V17 G3 IAP: All versions
ideapad S540-13ARE: All versions
ideapad S540-13ITL: All versions
Lenovo Slim 7 16IAH7: All versions
IdeaPad Slim 7 Pro-14IHU5: All versions
ideapad Slim 7-14ARE05: All versions
ideapad Slim 7-14ITL05: All versions
ideapad Slim 7-15ITL05: All versions
ThinkBook 13x ITG: All versions
ThinkBook 14 G2 ITL: All versions
ThinkBook 14 G3 ITL: All versions
ThinkBook 14 G4 IAP: All versions
ThinkBook 14 G4+ IAP: All versions
ThinkBook 14s Yoga G2 IAP: All versions
ThinkBook 14s Yoga ITL: All versions
ThinkBook 15 G2 ITL: All versions
ThinkBook 15 G3 ITL: All versions
ThinkBook 15 G4 IAP: All versions
ThinkBook 15P G2 ITH: All versions
ThinkBook 16 G4+ IAP: All versions
ThinkBook Plus G2 ITG: All versions
ThinkBook Plus G3 IAP: All versions
Lenovo V14 G2-ITL: All versions
Len ovo V14-ARE: All versions
Lenovo V15 G2-ITL: All versions
Lenovo V17 G2-ITL: All versions
Yoga 7 14IAL7: All versions
Yoga 7 16IAH7: All versions
IdeaPad Yoga 7 16IAP7: All versions
ideapad Yoga 7-14ITL5: All versions
ideapad Yoga 7-15ITL5: All versions
IdeaPad Yoga 9 14IAP7: All versions
Yoga 9 14IRP8: All versions
Yoga Duet 7-13IML05: All versions
Yoga Duet 7-13ITL6: All versions
Yoga Duet 7-13ITL6-L TE: All versions
Yoga Slim 6 14IAP8: All versions
Yoga Slim 6 14IRP8: All versions
Yoga Slim 7 Carbon 13IAP7: All versions
Yoga Slim 7 Carbon 13IRP8: All versions
ideapad Yoga Slim 7 Carbon 13ITL5: All versions
Yoga Slim 7 Pro 14IAH7: All versions
IdeaPad Yoga Slim 7 Pro 14IAP7: All versions
IdeaPad Yoga Slim 7 Pro 16IAH7: All versions
ideapad Yoga Slim 7 Pro-1 4IHU5: All versions
ideapad Yoga Slim 7 Pro-14IHU5 O: All versions
ideapad Yoga Slim 7 Pro-14ITL5: All versions
Yoga Slim 7 ProX 14IAH7: All versions
ideapad Yoga Slim 7-13ITL05: All versions
ideapad Yoga Slim 7-14ARE05: All versions
ideapad Yoga Slim 7-14ITL05: All versions
ideapad Yoga Slim 7-15ITL05: All versions
Yoga Slim 9 14IAP7: All versions
ideapad 3-14 ITL05: All versions
ideapad 3-14ITL6: All versions
ideapad 3-15ITL05: All versions
ideapad 3-15ITL6: All versions
ideapad 5 Pro-14ITL6: All versions
ideapad 5 Pro-16IHU6: All versions
ideapad 5-15ARE05: All versions
CPE2.3- cpe:2.3:h:lenovo:ideapad_d330-10igl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_17iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_15ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad _5_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_5_12iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3-15ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_l3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16ia h7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:legion_7_16iax7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_7-16ithg6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_s7 16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g3 _iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7_pro-14ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_13x_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_g2_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_16_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:len ovo_v14-are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7_16iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-15itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_9_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13iml05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6-l te:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14iap8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_carbon_13itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_pro_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-1 4ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14ihu5_o:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-13itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14 itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-15are05:*:*:*:*:*:*:*:*
http://support.lenovo.com/us/en/product_security/LEN-115634
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Buffer overflow
EUVDB-ID: #VU75026
Risk: Low
CVSSv3.1: 8.1 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2023-22615
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Insyde BIOS code. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
The vendor plans to release patches in August 2023.
ideapad D330-10IGL: All versions
IdeaPad 1 14IAU7: All versions
IdeaPad 1 15IAU7: All versions
IdeaPad 3 14IAU7: All versions
IdeaPad 3 15IAU7: All versions
IdeaPad 3 17IAU7: All versions
IdeaPad 3-14ARE05: All versions
IdeaPad 3-15ARE05: All versions
IdeaPad 3-17ARE05: All versions
IdeaPad 3-17ITL6: All versions
IdeaPad 5 14IAL7: All versions
IdeaPad 5 15IAL7: All versions
IdeaPad 5 Pro 14IAP7: All versions
IdeaPad 5 Pro 16IAH7: All versions
IdeaPad 5-14ITL05: All versions
IdeaPad Duet 3 10IGL5: All versions
IdeaPad Duet 5 12IAU7: All versions
IdeaPad Gaming 3 15IAH7: All versions
IdeaPad Gaming 3 16IAH7: All versions
IdeaPad Gaming 3-15IHU6: All versions
ideapad L3-15ITL6: All versions
Lenovo Legion 5 15IAH7: All versions
Lenovo Legion 5 15IAH7H: All versions
Lenovo Legion 5 Pro 16IA H7: All versions
Lenovo Legion 5 Pro 16IAH7H: All versions
Lenovo Legion 5 Pro-16ITH6: All versions
Lenovo Legion 5 Pro-16ITH6H: All versions
Lenovo Legion 5-15ITH6: All versions
Lenovo Legion 5-15ITH6H: All versions
Lenovo Legion 5-17ITH6: All versions
Lenovo Legion 5-17ITH6H: All versions
Legion 7 16IAX7: All versions
Lenovo Legion 7-16ITHg6: All versions
Lenovo Legion S7 16IAH7: All versions
Lenovo S14 G2 ITL: All versions
Lenovo S14 G3 IAP: All versions
Lenovo Slim 7 14IAP7: All versions
Lenovo Slim 7 14IRP8: All versions
Lenovo Slim 7 Carbon 13IAP7: All versions
Lenovo Slim 7 Carbon 13IRP8: All versions
Lenovo Slim 7 ProX 14IAH7: All versions
Lenovo Slim 9 14IAP7: All versions
Lenovo V14 G3 IAP: All versions
Lenovo V15 G3 IAP: All versions
Lenovo V17 G3 IAP: All versions
ideapad S540-13ARE: All versions
ideapad S540-13ITL: All versions
Lenovo Slim 7 16IAH7: All versions
IdeaPad Slim 7 Pro-14IHU5: All versions
ideapad Slim 7-14ARE05: All versions
ideapad Slim 7-14ITL05: All versions
ideapad Slim 7-15ITL05: All versions
ThinkBook 13x ITG: All versions
ThinkBook 14 G2 ITL: All versions
ThinkBook 14 G3 ITL: All versions
ThinkBook 14 G4 IAP: All versions
ThinkBook 14 G4+ IAP: All versions
ThinkBook 14s Yoga G2 IAP: All versions
ThinkBook 14s Yoga ITL: All versions
ThinkBook 15 G2 ITL: All versions
ThinkBook 15 G3 ITL: All versions
ThinkBook 15 G4 IAP: All versions
ThinkBook 15P G2 ITH: All versions
ThinkBook 16 G4+ IAP: All versions
ThinkBook Plus G2 ITG: All versions
ThinkBook Plus G3 IAP: All versions
Lenovo V14 G2-ITL: All versions
Len ovo V14-ARE: All versions
Lenovo V15 G2-ITL: All versions
Lenovo V17 G2-ITL: All versions
Yoga 7 14IAL7: All versions
Yoga 7 16IAH7: All versions
IdeaPad Yoga 7 16IAP7: All versions
ideapad Yoga 7-14ITL5: All versions
ideapad Yoga 7-15ITL5: All versions
IdeaPad Yoga 9 14IAP7: All versions
Yoga 9 14IRP8: All versions
Yoga Duet 7-13IML05: All versions
Yoga Duet 7-13ITL6: All versions
Yoga Duet 7-13ITL6-L TE: All versions
Yoga Slim 6 14IAP8: All versions
Yoga Slim 6 14IRP8: All versions
Yoga Slim 7 Carbon 13IAP7: All versions
Yoga Slim 7 Carbon 13IRP8: All versions
ideapad Yoga Slim 7 Carbon 13ITL5: All versions
Yoga Slim 7 Pro 14IAH7: All versions
IdeaPad Yoga Slim 7 Pro 14IAP7: All versions
IdeaPad Yoga Slim 7 Pro 16IAH7: All versions
ideapad Yoga Slim 7 Pro-1 4IHU5: All versions
ideapad Yoga Slim 7 Pro-14IHU5 O: All versions
ideapad Yoga Slim 7 Pro-14ITL5: All versions
Yoga Slim 7 ProX 14IAH7: All versions
ideapad Yoga Slim 7-13ITL05: All versions
ideapad Yoga Slim 7-14ARE05: All versions
ideapad Yoga Slim 7-14ITL05: All versions
ideapad Yoga Slim 7-15ITL05: All versions
Yoga Slim 9 14IAP7: All versions
ideapad 3-14 ITL05: All versions
ideapad 3-14ITL6: All versions
ideapad 3-15ITL05: All versions
ideapad 3-15ITL6: All versions
ideapad 5 Pro-14ITL6: All versions
ideapad 5 Pro-16IHU6: All versions
ideapad 5-15ARE05: All versions
CPE2.3- cpe:2.3:h:lenovo:ideapad_d330-10igl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_17iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_15ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad _5_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_5_12iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3-15ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_l3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16ia h7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:legion_7_16iax7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_7-16ithg6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_s7 16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g3 _iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7_pro-14ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_13x_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_g2_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_16_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:len ovo_v14-are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7_16iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-15itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_9_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13iml05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6-l te:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14iap8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_carbon_13itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_pro_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-1 4ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14ihu5_o:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-13itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14 itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-15are05:*:*:*:*:*:*:*:*
http://support.lenovo.com/us/en/product_security/LEN-115634
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) Buffer overflow
EUVDB-ID: #VU75027
Risk: Low
CVSSv3.1: 8.1 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2023-22612
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Insyde BIOS code. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
The vendor plans to release patches in August 2023.
ideapad D330-10IGL: All versions
IdeaPad 1 14IAU7: All versions
IdeaPad 1 15IAU7: All versions
IdeaPad 3 14IAU7: All versions
IdeaPad 3 15IAU7: All versions
IdeaPad 3 17IAU7: All versions
IdeaPad 3-14ARE05: All versions
IdeaPad 3-15ARE05: All versions
IdeaPad 3-17ARE05: All versions
IdeaPad 3-17ITL6: All versions
IdeaPad 5 14IAL7: All versions
IdeaPad 5 15IAL7: All versions
IdeaPad 5 Pro 14IAP7: All versions
IdeaPad 5 Pro 16IAH7: All versions
IdeaPad 5-14ITL05: All versions
IdeaPad Duet 3 10IGL5: All versions
IdeaPad Duet 5 12IAU7: All versions
IdeaPad Gaming 3 15IAH7: All versions
IdeaPad Gaming 3 16IAH7: All versions
IdeaPad Gaming 3-15IHU6: All versions
ideapad L3-15ITL6: All versions
Lenovo Legion 5 15IAH7: All versions
Lenovo Legion 5 15IAH7H: All versions
Lenovo Legion 5 Pro 16IA H7: All versions
Lenovo Legion 5 Pro 16IAH7H: All versions
Lenovo Legion 5 Pro-16ITH6: All versions
Lenovo Legion 5 Pro-16ITH6H: All versions
Lenovo Legion 5-15ITH6: All versions
Lenovo Legion 5-15ITH6H: All versions
Lenovo Legion 5-17ITH6: All versions
Lenovo Legion 5-17ITH6H: All versions
Legion 7 16IAX7: All versions
Lenovo Legion 7-16ITHg6: All versions
Lenovo Legion S7 16IAH7: All versions
Lenovo S14 G2 ITL: All versions
Lenovo S14 G3 IAP: All versions
Lenovo Slim 7 14IAP7: All versions
Lenovo Slim 7 14IRP8: All versions
Lenovo Slim 7 Carbon 13IAP7: All versions
Lenovo Slim 7 Carbon 13IRP8: All versions
Lenovo Slim 7 ProX 14IAH7: All versions
Lenovo Slim 9 14IAP7: All versions
Lenovo V14 G3 IAP: All versions
Lenovo V15 G3 IAP: All versions
Lenovo V17 G3 IAP: All versions
ideapad S540-13ARE: All versions
ideapad S540-13ITL: All versions
Lenovo Slim 7 16IAH7: All versions
IdeaPad Slim 7 Pro-14IHU5: All versions
ideapad Slim 7-14ARE05: All versions
ideapad Slim 7-14ITL05: All versions
ideapad Slim 7-15ITL05: All versions
ThinkBook 13x ITG: All versions
ThinkBook 14 G2 ITL: All versions
ThinkBook 14 G3 ITL: All versions
ThinkBook 14 G4 IAP: All versions
ThinkBook 14 G4+ IAP: All versions
ThinkBook 14s Yoga G2 IAP: All versions
ThinkBook 14s Yoga ITL: All versions
ThinkBook 15 G2 ITL: All versions
ThinkBook 15 G3 ITL: All versions
ThinkBook 15 G4 IAP: All versions
ThinkBook 15P G2 ITH: All versions
ThinkBook 16 G4+ IAP: All versions
ThinkBook Plus G2 ITG: All versions
ThinkBook Plus G3 IAP: All versions
Lenovo V14 G2-ITL: All versions
Len ovo V14-ARE: All versions
Lenovo V15 G2-ITL: All versions
Lenovo V17 G2-ITL: All versions
Yoga 7 14IAL7: All versions
Yoga 7 16IAH7: All versions
IdeaPad Yoga 7 16IAP7: All versions
ideapad Yoga 7-14ITL5: All versions
ideapad Yoga 7-15ITL5: All versions
IdeaPad Yoga 9 14IAP7: All versions
Yoga 9 14IRP8: All versions
Yoga Duet 7-13IML05: All versions
Yoga Duet 7-13ITL6: All versions
Yoga Duet 7-13ITL6-L TE: All versions
Yoga Slim 6 14IAP8: All versions
Yoga Slim 6 14IRP8: All versions
Yoga Slim 7 Carbon 13IAP7: All versions
Yoga Slim 7 Carbon 13IRP8: All versions
ideapad Yoga Slim 7 Carbon 13ITL5: All versions
Yoga Slim 7 Pro 14IAH7: All versions
IdeaPad Yoga Slim 7 Pro 14IAP7: All versions
IdeaPad Yoga Slim 7 Pro 16IAH7: All versions
ideapad Yoga Slim 7 Pro-1 4IHU5: All versions
ideapad Yoga Slim 7 Pro-14IHU5 O: All versions
ideapad Yoga Slim 7 Pro-14ITL5: All versions
Yoga Slim 7 ProX 14IAH7: All versions
ideapad Yoga Slim 7-13ITL05: All versions
ideapad Yoga Slim 7-14ARE05: All versions
ideapad Yoga Slim 7-14ITL05: All versions
ideapad Yoga Slim 7-15ITL05: All versions
Yoga Slim 9 14IAP7: All versions
ideapad 3-14 ITL05: All versions
ideapad 3-14ITL6: All versions
ideapad 3-15ITL05: All versions
ideapad 3-15ITL6: All versions
ideapad 5 Pro-14ITL6: All versions
ideapad 5 Pro-16IHU6: All versions
ideapad 5-15ARE05: All versions
CPE2.3- cpe:2.3:h:lenovo:ideapad_d330-10igl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_17iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_15ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad _5_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_5_12iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3-15ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_l3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16ia h7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:legion_7_16iax7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_7-16ithg6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_s7 16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g3 _iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7_pro-14ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_13x_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_g2_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_16_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:len ovo_v14-are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7_16iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-15itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_9_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13iml05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6-l te:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14iap8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_carbon_13itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_pro_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-1 4ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14ihu5_o:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-13itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14 itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-15are05:*:*:*:*:*:*:*:*
http://support.lenovo.com/us/en/product_security/LEN-115634
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) Buffer overflow
EUVDB-ID: #VU75028
Risk: Low
CVSSv3.1: 8.1 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:U/RC:C]
CVE-ID: CVE-2022-24350
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the Insyde BIOS code. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.
The vendor plans to release patches in August 2023.
ideapad D330-10IGL: All versions
IdeaPad 1 14IAU7: All versions
IdeaPad 1 15IAU7: All versions
IdeaPad 3 14IAU7: All versions
IdeaPad 3 15IAU7: All versions
IdeaPad 3 17IAU7: All versions
IdeaPad 3-14ARE05: All versions
IdeaPad 3-15ARE05: All versions
IdeaPad 3-17ARE05: All versions
IdeaPad 3-17ITL6: All versions
IdeaPad 5 14IAL7: All versions
IdeaPad 5 15IAL7: All versions
IdeaPad 5 Pro 14IAP7: All versions
IdeaPad 5 Pro 16IAH7: All versions
IdeaPad 5-14ITL05: All versions
IdeaPad Duet 3 10IGL5: All versions
IdeaPad Duet 5 12IAU7: All versions
IdeaPad Gaming 3 15IAH7: All versions
IdeaPad Gaming 3 16IAH7: All versions
IdeaPad Gaming 3-15IHU6: All versions
ideapad L3-15ITL6: All versions
Lenovo Legion 5 15IAH7: All versions
Lenovo Legion 5 15IAH7H: All versions
Lenovo Legion 5 Pro 16IA H7: All versions
Lenovo Legion 5 Pro 16IAH7H: All versions
Lenovo Legion 5 Pro-16ITH6: All versions
Lenovo Legion 5 Pro-16ITH6H: All versions
Lenovo Legion 5-15ITH6: All versions
Lenovo Legion 5-15ITH6H: All versions
Lenovo Legion 5-17ITH6: All versions
Lenovo Legion 5-17ITH6H: All versions
Legion 7 16IAX7: All versions
Lenovo Legion 7-16ITHg6: All versions
Lenovo Legion S7 16IAH7: All versions
Lenovo S14 G2 ITL: All versions
Lenovo S14 G3 IAP: All versions
Lenovo Slim 7 14IAP7: All versions
Lenovo Slim 7 14IRP8: All versions
Lenovo Slim 7 Carbon 13IAP7: All versions
Lenovo Slim 7 Carbon 13IRP8: All versions
Lenovo Slim 7 ProX 14IAH7: All versions
Lenovo Slim 9 14IAP7: All versions
Lenovo V14 G3 IAP: All versions
Lenovo V15 G3 IAP: All versions
Lenovo V17 G3 IAP: All versions
ideapad S540-13ARE: All versions
ideapad S540-13ITL: All versions
Lenovo Slim 7 16IAH7: All versions
IdeaPad Slim 7 Pro-14IHU5: All versions
ideapad Slim 7-14ARE05: All versions
ideapad Slim 7-14ITL05: All versions
ideapad Slim 7-15ITL05: All versions
ThinkBook 13x ITG: All versions
ThinkBook 14 G2 ITL: All versions
ThinkBook 14 G3 ITL: All versions
ThinkBook 14 G4 IAP: All versions
ThinkBook 14 G4+ IAP: All versions
ThinkBook 14s Yoga G2 IAP: All versions
ThinkBook 14s Yoga ITL: All versions
ThinkBook 15 G2 ITL: All versions
ThinkBook 15 G3 ITL: All versions
ThinkBook 15 G4 IAP: All versions
ThinkBook 15P G2 ITH: All versions
ThinkBook 16 G4+ IAP: All versions
ThinkBook Plus G2 ITG: All versions
ThinkBook Plus G3 IAP: All versions
Lenovo V14 G2-ITL: All versions
Len ovo V14-ARE: All versions
Lenovo V15 G2-ITL: All versions
Lenovo V17 G2-ITL: All versions
Yoga 7 14IAL7: All versions
Yoga 7 16IAH7: All versions
IdeaPad Yoga 7 16IAP7: All versions
ideapad Yoga 7-14ITL5: All versions
ideapad Yoga 7-15ITL5: All versions
IdeaPad Yoga 9 14IAP7: All versions
Yoga 9 14IRP8: All versions
Yoga Duet 7-13IML05: All versions
Yoga Duet 7-13ITL6: All versions
Yoga Duet 7-13ITL6-L TE: All versions
Yoga Slim 6 14IAP8: All versions
Yoga Slim 6 14IRP8: All versions
Yoga Slim 7 Carbon 13IAP7: All versions
Yoga Slim 7 Carbon 13IRP8: All versions
ideapad Yoga Slim 7 Carbon 13ITL5: All versions
Yoga Slim 7 Pro 14IAH7: All versions
IdeaPad Yoga Slim 7 Pro 14IAP7: All versions
IdeaPad Yoga Slim 7 Pro 16IAH7: All versions
ideapad Yoga Slim 7 Pro-1 4IHU5: All versions
ideapad Yoga Slim 7 Pro-14IHU5 O: All versions
ideapad Yoga Slim 7 Pro-14ITL5: All versions
Yoga Slim 7 ProX 14IAH7: All versions
ideapad Yoga Slim 7-13ITL05: All versions
ideapad Yoga Slim 7-14ARE05: All versions
ideapad Yoga Slim 7-14ITL05: All versions
ideapad Yoga Slim 7-15ITL05: All versions
Yoga Slim 9 14IAP7: All versions
ideapad 3-14 ITL05: All versions
ideapad 3-14ITL6: All versions
ideapad 3-15ITL05: All versions
ideapad 3-15ITL6: All versions
ideapad 5 Pro-14ITL6: All versions
ideapad 5 Pro-16IHU6: All versions
ideapad 5-15ARE05: All versions
CPE2.3- cpe:2.3:h:lenovo:ideapad_d330-10igl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_1_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_14iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_15iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3_17iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-17itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_15ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad _5_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_3_10igl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_duet_5_12iau7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_gaming_3-15ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_l3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_15iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16ia h7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro_16iah7h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5_pro-16ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-15ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_5-17ith6h:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:legion_7_16iax7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_7-16ithg6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_legion_s7 16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_s14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g3 _iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_s540-13itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_slim_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7_pro-14ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_13x_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_g2_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_14s_yoga_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g2_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g3_itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_15p_g2_ith:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_16_g4_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g2_itg:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:thinkbook_plus_g3_iap:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v14_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:len ovo_v14-are:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v15_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:lenovo_v17_g2-itl:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_14ial7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_7_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7_16iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_7-15itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_9_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13iml05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_duet_7-13itl6-l te:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14iap8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_6_14irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_carbon_13irp8:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_carbon_13itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_pro_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro_16iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-1 4ihu5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14ihu5_o:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7_pro-14itl5:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_7_prox_14iah7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-13itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14are05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-14itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_yoga_slim_7-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:yoga_slim_9_14iap7:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14 itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl05:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_3-15itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-14itl6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5_pro-16ihu6:*:*:*:*:*:*:*:*
- cpe:2.3:h:lenovo:ideapad_5-15are05:*:*:*:*:*:*:*:*
http://support.lenovo.com/us/en/product_security/LEN-115634
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
