CVE-2023-43577 | ByteOS Network

Vulnerability Details :

CVE-2023-43577

Assigner-lenovo

Assigner Org ID-da227ddf-6e25-4b41-b023-0f976dcaca4b

Published At-08 Nov, 2023 | 22:38

Updated At-02 Aug, 2024 | 19:44

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:lenovo

Assigner Org ID:da227ddf-6e25-4b41-b023-0f976dcaca4b

Published At:08 Nov, 2023 | 22:38

Updated At:02 Aug, 2024 | 19:44

▼CVE Numbering Authority (CNA)

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

Affected Products

Vendor

Lenovo Group Limited

Product

Default Status

unaffected

Versions

Affected

various

Problem Types

Type	CWE ID	Description
CWE	CWE-120	CWE-120: Buffer Copy without Checking Size of Input

Type: CWE

CWE ID: CWE-120

Description: CWE-120: Buffer Copy without Checking Size of Input

Metrics

Version	Base score	Base severity	Vector
3.1	6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 6.7

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Solutions

Update system firmware to the version (or newer) indicated for your model in the advisory: https://support.lenovo.com/us/en/product_security/LEN-141775

Credits

finder

Lenovo thanks Zichuan Li (@Ri7erLi) from Indiana University Bloomington for reporting this vulnerability.

References

Hyperlink	Resource
https://support.lenovo.com/us/en/product_security/LEN-141775	N/A

Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-141775

Resource: N/A

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.lenovo.com/us/en/product_security/LEN-141775	x_transferred

Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-141775

Resource:

x_transferred

▼National Vulnerability Database (NVD)

Source:psirt@lenovo.com

Published At:08 Nov, 2023 | 23:15

Updated At:16 Nov, 2023 | 01:34

A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Primary

Version: 3.1

Base score: 6.7

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Type: Secondary

Version: 3.1

Base score: 6.7

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Lenovo Group Limited

>>ideacentre_c5-14imb05_firmware>>Versions before o4hkt3ca(exclusive)

cpe:2.3:o:lenovo:ideacentre_c5-14imb05_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_c5-14imb05>>-

cpe:2.3:h:lenovo:ideacentre_c5-14imb05:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_3-07ada05_firmware>>Versions before o4fkt39a(exclusive)

cpe:2.3:o:lenovo:ideacentre_3-07ada05_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_3-07ada05>>-

cpe:2.3:h:lenovo:ideacentre_3-07ada05:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_3-07imb05_firmware>>Versions before m2vkt21a(exclusive)

cpe:2.3:o:lenovo:ideacentre_3-07imb05_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_3-07imb05>>-

cpe:2.3:h:lenovo:ideacentre_3-07imb05:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_5_14iab7_firmware>>Versions before m42kt46a(exclusive)

cpe:2.3:o:lenovo:ideacentre_5_14iab7_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_5_14iab7>>-

cpe:2.3:h:lenovo:ideacentre_5_14iab7:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_5_14irb8_firmware>>Versions before m4ukt36a(exclusive)

cpe:2.3:o:lenovo:ideacentre_5_14irb8_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_5_14irb8>>-

cpe:2.3:h:lenovo:ideacentre_5_14irb8:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_5-14acn6_firmware>>-

cpe:2.3:o:lenovo:ideacentre_5-14acn6_firmware:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_5-14acn6>>-

cpe:2.3:h:lenovo:ideacentre_5-14acn6:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_t540-15ama_g_firmware>>-

cpe:2.3:o:lenovo:ideacentre_t540-15ama_g_firmware:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>ideacentre_t540-15ama_g>>-

cpe:2.3:h:lenovo:ideacentre_t540-15ama_g:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_70t_gen_3_firmware>>Versions before m40kt45a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_70t_gen_3_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_70t_gen_3>>-

cpe:2.3:h:lenovo:thinkcentre_neo_70t_gen_3:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_50t_gen_3_firmware>>Versions before m42kt46a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_50t_gen_3_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_50t_gen_3>>-

cpe:2.3:h:lenovo:thinkcentre_neo_50t_gen_3:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_50a_24_gen_4_firmware>>Versions before o5xkt18a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_50a_24_gen_4_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_50a_24_gen_4>>-

cpe:2.3:h:lenovo:thinkcentre_neo_50a_24_gen_4:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_50a_24_gen_3_firmware>>Versions before o5rkt41a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_50a_24_gen_3_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_50a_24_gen_3>>-

cpe:2.3:h:lenovo:thinkcentre_neo_50a_24_gen_3:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_27_gen_4_firmware>>Versions before o5nkt33a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_30a_27_gen_4_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_27_gen_4_firmware>>o5nkt33a

cpe:2.3:o:lenovo:thinkcentre_neo_30a_27_gen_4_firmware:o5nkt33a:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_27_gen_4>>-

cpe:2.3:h:lenovo:thinkcentre_neo_30a_27_gen_4:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_27_gen_3_firmware>>Versions before o5nkt33a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_30a_27_gen_3_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_27_gen_3>>-

cpe:2.3:h:lenovo:thinkcentre_neo_30a_27_gen_3:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_24_gen_4_firmware>>Versions before o5nkt33a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_30a_24_gen_4_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_24_gen_4>>-

cpe:2.3:h:lenovo:thinkcentre_neo_30a_24_gen_4:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_24_gen_3_firmware>>Versions before o5nkt33a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_30a_24_gen_3_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_24_gen_3>>-

cpe:2.3:h:lenovo:thinkcentre_neo_30a_24_gen_3:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_22_gen_4_firmware>>Versions before o5nkt33a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_30a_22_gen_4_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_22_gen_4>>-

cpe:2.3:h:lenovo:thinkcentre_neo_30a_22_gen_4:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_22_gen_3_firmware>>Versions before o5nkt33a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_neo_30a_22_gen_3_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_neo_30a_22_gen_3>>-

cpe:2.3:h:lenovo:thinkcentre_neo_30a_22_gen_3:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m920z_all-in-one_firmware>>Versions before m1mkt56a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_m920z_all-in-one_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m920z_all-in-one>>-

cpe:2.3:h:lenovo:thinkcentre_m920z_all-in-one:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90t_gen_3_firmware>>Versions before m40kt45a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_m90t_gen_3_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90t_gen_3>>-

cpe:2.3:h:lenovo:thinkcentre_m90t_gen_3:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90t_firmware>>Versions before m2tkt55a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_m90t_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90t>>-

cpe:2.3:h:lenovo:thinkcentre_m90t:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90s_gen_3_firmware>>Versions before m40kt45a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_m90s_gen_3_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90s_gen_3>>-

cpe:2.3:h:lenovo:thinkcentre_m90s_gen_3:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90s_firmware>>Versions before m2tkt55a(exclusive)

cpe:2.3:o:lenovo:thinkcentre_m90s_firmware:*:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90s>>-

cpe:2.3:h:lenovo:thinkcentre_m90s:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90q_tiny_firmware>>-

cpe:2.3:o:lenovo:thinkcentre_m90q_tiny_firmware:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90q_tiny>>-

cpe:2.3:h:lenovo:thinkcentre_m90q_tiny:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90q_gen_3_firmware>>-

cpe:2.3:o:lenovo:thinkcentre_m90q_gen_3_firmware:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90q_gen_3>>-

cpe:2.3:h:lenovo:thinkcentre_m90q_gen_3:-:*:*:*:*:*:*:*

Lenovo Group Limited

>>thinkcentre_m90q_gen_2_firmware>>-

cpe:2.3:o:lenovo:thinkcentre_m90q_gen_2_firmware:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-120	Primary	psirt@lenovo.com

CWE ID: CWE-120

Type: Primary

Source: psirt@lenovo.com

References

Hyperlink	Source	Resource
https://support.lenovo.com/us/en/product_security/LEN-141775	psirt@lenovo.com	Vendor Advisory

Hyperlink: https://support.lenovo.com/us/en/product_security/LEN-141775

Source: psirt@lenovo.com

Resource:

Vendor Advisory

Similar CVEs

153Records found

Matching Score-4

Assigner-Talos

Matching Score-4

Assigner-Talos

CVSS Score-8.2||HIGH

EPSS-3.13% / 87.14%

||

7 Day CHG~0.00%

Published-12 May, 2022 | 17:01

Updated-15 Apr, 2025 | 19:03

A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted file can lead to remote code execution. An attacker can send a sequence of requests to trigger this vulnerability.

Vendor-InHand Networks, Inc.

Product-ir302_firmware ir302 InRouter302

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.38%

||

7 Day CHG~0.00%

Published-06 May, 2024 | 14:32

Updated-16 Dec, 2025 | 18:23

Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Audio

Memory corruption while copying the sound model data from user to kernel buffer during sound model register.

Vendor-Qualcomm Technologies, Inc.

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Matching Score-4

Assigner-Qualcomm, Inc.

Matching Score-4

Assigner-Qualcomm, Inc.

CVSS Score-6.7||MEDIUM

EPSS-0.04% / 12.62%

||

7 Day CHG~0.00%

Published-07 Nov, 2023 | 05:26

Updated-11 Aug, 2025 | 15:06

Buffer Copy without Checking Size of Input in Audio

Memory corruption while processing audio effects.

Vendor-Qualcomm Technologies, Inc.

Product-sdm429w_firmware qcs410_firmware sa6150p_firmware sd865_5g snapdragon_429_mobile_platform_firmware sw5100p qca6595 qcs610_firmware wcd9335 sxr2130_firmware wcd9370 qca8081_firmware ar8035_firmware qca6696 wcd9340_firmware wcd9341_firmware snapdragon_w5\+_gen_1_wearable_platform_firmware qca6320 qcc710_firmware qca6426 qca6564au wcn3610 qcn9074 wsa8815_firmware sa8195p_firmware qca8337_firmware qca8337 qca6426_firmware qca6574au_firmware qam8295p wcd9341 qca6574au snapdragon_855_mobile_platform wcn3950 wsa8810_firmware snapdragon_xr2_5g_platform snapdragon_429_mobile_platform snapdragon_835_mobile_pc_platform_firmware wcn3660b_firmware qca6554a fastconnect_6800_firmware sa8295p_firmware sd835_firmware video_collaboration_vc1_platform_firmware qca6584au qca6320_firmware qcn6274_firmware qcc710 sw5100_firmware qca6310_firmware fastconnect_6800 qfw7114_firmware qca6595_firmware fastconnect_7800_firmware fastconnect_6900 video_collaboration_vc1_platform qfw7114 snapdragon_x55_5g_modem-rf_system fastconnect_6900_firmware qca6310 wcd9380 sa6145p_firmware snapdragon_xr2_5g_platform_firmware sa8150p msm8996au_firmware sa6155p snapdragon_835_mobile_pc_platform qca6564au_firmware wsa8810 snapdragon_865\+_5g_mobile_platform sw5100 video_collaboration_vc3_platform qca6595au aqt1000 snapdragon_865_5g_mobile_platform_firmware sa6155p_firmware qam8295p_firmware sd855 sd835 wcn3990_firmware snapdragon_870_5g_mobile_platform_firmware qfw7124_firmware qca6564a_firmware qca6436_firmware snapdragon_wear_4100\+_platform_firmware wcn3610_firmware snapdragon_855\+\/860_mobile_platform_firmware qca6420 snapdragon_865\+_5g_mobile_platform_firmware qca6430 wcd9370_firmware sdx55_firmware snapdragon_x55_5g_modem-rf_system_firmware qca6554a_firmware wcn3660b qca6574a sxr2130 wcn3620_firmware sa8195p wcd9340 snapdragon_820_automotive_platform_firmware snapdragon_855_mobile_platform_firmware qca6420_firmware aqt1000_firmware wcn3988 sdm429w qca6584au_firmware sd855_firmware qcn6274 qca6436 qca6574 qfw7124 snapdragon_x75_5g_modem-rf_system qca6595au_firmware qca6391_firmware wcd9335_firmware wsa8835 qca6430_firmware snapdragon_870_5g_mobile_platform sw5100p_firmware qca6696_firmware snapdragon_865_5g_mobile_platform wcd9380_firmware sa6150p qca6574_firmware qcs410 sa8155p_firmware qca8081 qca6564a wsa8815 mdm9628 sa8155p wcn3980_firmware wsa8830 mdm9628_firmware sa6145p qcn9074_firmware ar8035 qca6574a_firmware sdx55 msm8996au wcn3620 qca6391 qcn6224 wcn3950_firmware sa8295p fastconnect_6200 fastconnect_7800 sa8145p_firmware wcn3680b sd865_5g_firmware sa8150p_firmware snapdragon_855\+\/860_mobile_platform snapdragon_w5\+_gen_1_wearable_platform wcn3988_firmware video_collaboration_vc3_platform_firmware sa8145p wcn3990 snapdragon_wear_4100\+_platform wsa8835_firmware snapdragon_x75_5g_modem-rf_system_firmware wcn3980 snapdragon_820_automotive_platform fastconnect_6200_firmware wsa8830_firmware wcn3680b_firmware qcn6224_firmware qcs610 Snapdragon

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CWE ID-CWE-787

Out-of-bounds Write