{"id":"CVE-2023-43576","aliases":["EUVD-2023-47982","GHSA-rwr4-c9v9-crcw"],"status":"published","title":"A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may...","description":"A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.0023,"percentile":0.13884,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2023-11-08T22:37:43Z","modified":"2026-06-17T06:26:01Z","products":[{"vendor":"lenovo","product":"desktop bios"},{"vendor":"lenovo","product":"ideacentre_3-07ada05_firmware"},{"vendor":"lenovo","product":"ideacentre_3-07imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_5-14acn6_firmware"},{"vendor":"lenovo","product":"ideacentre_5-14imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_5-14iob6_firmware"},{"vendor":"lenovo","product":"ideacentre_5_14iab7_firmware"},{"vendor":"lenovo","product":"ideacentre_5_14irb8_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3-22iil5_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3-22imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3-22itl6_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3-24alc6_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3-24iil5_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3-24imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3-24itl6_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3-27imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3-27itl6_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3_21itl7_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3_22iap7_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3_24iap7_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_3_27iap7_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_5_24iah7_firmware"},{"vendor":"lenovo","product":"ideacentre_aio_5_27iah7_firmware"},{"vendor":"lenovo","product":"ideacentre_c5-14imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_creator_5-14iob6_firmware"},{"vendor":"lenovo","product":"ideacentre_g5-14amr05_firmware"},{"vendor":"lenovo","product":"ideacentre_g5-14imb05_firmware"},{"vendor":"lenovo","product":"ideacentre_gaming_5-14acn6_firmware"},{"vendor":"lenovo","product":"ideacentre_gaming_5-14iob6_firmware"},{"vendor":"lenovo","product":"ideacentre_gaming_5_17acn7_firmware"},{"vendor":"lenovo","product":"ideacentre_gaming_5_17iab7_firmware"},{"vendor":"lenovo","product":"ideacentre_mini_5-01imh05_firmware"},{"vendor":"lenovo","product":"ideacentre_mini_5_01iaq7_firmware"},{"vendor":"lenovo","product":"ideacentre_t540-15ama_g_firmware"},{"vendor":"lenovo","product":"legion_t5_26iab7_firmware"},{"vendor":"lenovo","product":"legion_t5_26irb8_firmware"},{"vendor":"lenovo","product":"legion_t7-34iaz7_firmware"},{"vendor":"lenovo","product":"legion_t7-34imz5_firmware"},{"vendor":"lenovo","product":"legion_t7_34irz8_firmware"},{"vendor":"lenovo","product":"loq_17irb8_firmware"},{"vendor":"lenovo","product":"thinkcentre_m625q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m630e_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70a_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70c_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70q_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70s_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m70t_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75n_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75q_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75s_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m75t_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80q_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80q_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80s_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m80t_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90a_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90a_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90a_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90a_pro_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90q_gen_2_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90q_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90q_tiny_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90s_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90s_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90t_firmware"},{"vendor":"lenovo","product":"thinkcentre_m90t_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_m920z_all-in-one_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_30a_22_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_30a_22_gen_4_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_30a_24_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_30a_24_gen_4_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_30a_27_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_30a_27_gen_4_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_50a_24_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_50a_24_gen_4_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_50t_gen_3_firmware"},{"vendor":"lenovo","product":"thinkcentre_neo_70t_gen_3_firmware"},{"vendor":"lenovo","product":"thinkedge_se30_firmware"},{"vendor":"lenovo","product":"thinkstation_p320_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p330_workstation_2nd_gen_firmware"},{"vendor":"lenovo","product":"thinkstation_p330_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p340_tiny_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p340_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p348_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p350_tiny_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p350_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p358_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p360_tiny_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p360_ultra_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p360_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p520_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p520c_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p720_workstation_firmware"},{"vendor":"lenovo","product":"thinkstation_p920_workstation_firmware"},{"vendor":"lenovo","product":"v30a-22iml_firmware"},{"vendor":"lenovo","product":"v30a-22itl_firmware"},{"vendor":"lenovo","product":"v30a-24iml_firmware"},{"vendor":"lenovo","product":"v30a-24itl_firmware"},{"vendor":"lenovo","product":"v50a-22imb_firmware"},{"vendor":"lenovo","product":"v50a-24imb_firmware"},{"vendor":"lenovo","product":"v50s-07imb_firmware"},{"vendor":"lenovo","product":"v50t-13imb_firmware"},{"vendor":"lenovo","product":"v50t-13imh_firmware"},{"vendor":"lenovo","product":"v50t-13iob_firmware"},{"vendor":"lenovo","product":"v55t_gen_2_13acn_firmware"},{"vendor":"lenovo","product":"yoga_aio_7-27arh6_firmware"},{"vendor":"lenovo","product":"yoga_aio_7_27arh7_firmware"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-141775","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43576"},{"url":"https://github.com/advisories/GHSA-rwr4-c9v9-crcw"}],"sources":{"cve":[{"id":"CVE-2023-43576","description":"A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.","status":"published","published":"2023-11-08T22:37:43.945Z","modified":"2024-08-02T19:44:43.777Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:14.633899Z"}],"euvd":[{"id":"EUVD-2023-47982","description":"A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.","status":"published","published":"2023-11-08T22:37:43Z","modified":"2024-08-02T19:44:43Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T03:49:59.530903Z"}],"ghsa":[{"id":"GHSA-rwr4-c9v9-crcw","title":"A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may...","description":"A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.","status":"published","published":"2023-11-09T00:33:56Z","modified":"2023-11-09T00:34:08Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:54:55.524004Z"}],"nvd":[{"id":"CVE-2023-43576","description":"A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.","status":"published","published":"2023-11-08T23:15:09.67Z","modified":"2026-06-17T06:26:01.097Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:43.669554Z"}]}}