● CVE — Medium
CVE-2023-2290
VendorlenovoProductthinkpad e14 firmware, thinkpad e15 firmware, thinkpad e490 firmware, thinkpad e490s firmware, thinkpad e590 firmware, thinkpad l490 firmware, thinkpad l590 firmware, thinkpad p1 gen 2 firmware, thinkpad l14 firmware, thinkpad l15 firmware, thinkpad e14 gen 2 firmware, thinkpad e14 gen 4 firmware, thinkpad e15 gen 2 firmware, thinkpad e15 gen 4 firmware, thinkpad l13 gen 3 firmware, thinkpad l13 yoga gen 3 firmware, thinkpad l15 gen 2 firmware, thinkpad l15 gen 3 firmware, thinkpad p14s gen 1 firmware, thinkpad p14s gen 2 firmware, thinkpad p14s gen 3 firmware, thinkpad p15 gen 1 firmware, thinkpad p1 gen 3 firmware, thinkpad p1 gen 4 firmware, thinkpad p1 gen 5 firmwareDiscoveredJun 26, 2023UpdatedNov 21, 2024
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.