Ideacentre C5 14Imb05 Firmware
CVE-2023-43573
MEDIUM
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
AnalysisAI
A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Buffer Copy without Size Check (CWE-120), which allows attackers to overflow a buffer to corrupt adjacent memory. A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. Affected products include: Lenovo Ideacentre C5-14Imb05 Firmware, Lenovo Ideacentre 3-07Ada05 Firmware, Lenovo Ideacentre 3-07Imb05 Firmware, Lenovo Ideacentre 5 14Iab7 Firmware, Lenovo Ideacentre 5 14Irb8 Firmware.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Always validate buffer sizes before copy operations. Use bounded functions (strncpy, snprintf). Enable compiler protections.
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated pr
A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with el
A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated pri
A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated pri
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated
A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker
A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacke
A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker w
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker wi
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker wit
A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker wi
A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local a
Same weakness CWE-120 – Classic Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today