CVE-2023-45075
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local...
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
- Record
CVE-2023-45075- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
EUVDEUVD-2023-49396
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
- Record
EUVD-2023-49396- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cjpq-3xp9-4722
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local...
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
- Record
GHSA-cjpq-3xp9-4722- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
NVD
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
- Record
CVE-2023-45075- CVSS 3.1
- 6.7 Medium
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
Affected products
- lenovo bios
- lenovo ideacentre 3-07ada05 firmware
- lenovo ideacentre 3-07imb05 firmware
- lenovo ideacentre 5-14iob6 firmware
- lenovo ideacentre c5-14imb05 firmware
- lenovo ideacentre creator 5-14iob6 firmware
- lenovo ideacentre g5-14amr05 firmware
- lenovo ideacentre g5-14imb05 firmware
- lenovo ideacentre gaming 5-14iob6 firmware
- lenovo ideacentre mini 5-01imh05 firmware
- lenovo ideacentre mini 5 01iaq7 firmware
- lenovo legion t7-34imz5 firmware
Show 50 moreShow less
- lenovo thinkcentre m625q firmware
- lenovo thinkcentre m630e firmware
- lenovo thinkcentre m70a firmware
- lenovo thinkcentre m70c firmware
- lenovo thinkcentre m70q firmware
- lenovo thinkcentre m70s firmware
- lenovo thinkcentre m70t firmware
- lenovo thinkcentre m720q firmware
- lenovo thinkcentre m720s firmware
- lenovo thinkcentre m720t firmware
- lenovo thinkcentre m75n firmware
- lenovo thinkcentre m75q gen 2 firmware
- lenovo thinkcentre m75s gen 2 firmware
- lenovo thinkcentre m75t gen 2 firmware
- lenovo thinkcentre m80q firmware
- lenovo thinkcentre m80s firmware
- lenovo thinkcentre m80t firmware
- lenovo thinkcentre m820z all-in-one firmware
- lenovo thinkcentre m90a firmware
- lenovo thinkcentre m90q tiny firmware
- lenovo thinkcentre m90s firmware
- lenovo thinkcentre m90t firmware
- lenovo thinkcentre m920q firmware
- lenovo thinkcentre m920s firmware
- lenovo thinkcentre m920t firmware
- lenovo thinkcentre m920x firmware
- lenovo thinkcentre m920z all-in-one firmware
- lenovo thinkedge se30 firmware
- lenovo thinkstation p320 workstation firmware
- lenovo thinkstation p330 tiny workstation firmware
- lenovo thinkstation p330 workstation 2nd gen firmware
- lenovo thinkstation p330 workstation firmware
- lenovo thinkstation p340 tiny workstation firmware
- lenovo thinkstation p340 workstation firmware
- lenovo thinkstation p348 workstation firmware
- lenovo thinkstation p350 workstation firmware
- lenovo thinkstation p360 workstation firmware
- lenovo thinkstation p520 workstation firmware
- lenovo thinkstation p520c workstation firmware
- lenovo thinkstation p720 workstation firmware
- lenovo thinkstation p920 workstation firmware
- lenovo v30a-22iml firmware
- lenovo v30a-24iml firmware
- lenovo v50a-22imb firmware
- lenovo v50a-24imb firmware
- lenovo v50s-07imb firmware
- lenovo v50t-13imb firmware
- lenovo v50t-13imh firmware
- lenovo v50t-13iob g2 firmware
- lenovo v55t gen 2 13acn firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-45075 is a medium vulnerability (CVSS 6.7) in Lenovo Bios, published November 8, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 14th percentile. No source names a fixed version.