← Database

CVE-2023-2290

MEDIUM CVSS: 6.4 Published: 2023-06-26 Modified: 2026-06-17

Description

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected Platforms

Lenovo Thinkpad X1 Carbon 10Th Gen FirmwareLenovo Thinkpad X1 Carbon 8Th Gen FirmwareLenovo Thinkpad L15 Gen 3 FirmwareLenovo Thinkpad L490Lenovo Thinkpad P1 Gen 4 FirmwareLenovo Thinkpad P1 Gen 2 FirmwareLenovo Thinkpad X1 Yoga 4Th Gen FirmwareLenovo Thinkpad P53SLenovo Thinkpad T490S FirmwareLenovo Thinkpad X1 Nano Gen 2 Firmware

Weakness Type

CWE-787, NVD-CWE-noinfo

References