medium
6.7
CWE
120 119
Advisory Published
Updated

CVE-2023-43580: Buffer Overflow

First published: Wed Nov 08 2023(Updated: )

A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.

Credit: psirt@lenovo.com

Affected SoftwareAffected VersionHow to fix
Lenovo Ideacentre C5-14IMB05<o4hkt3ca
Lenovo Ideacentre C5-14MB05 Firmware
Lenovo ideacentre 3-07ada05<o4fkt39a
Lenovo ideacentre 3-07ada05 firmware
Lenovo ideacentre 3-07imb05<m2vkt21a
Lenovo ideacentre 3-07imb05 firmware
Lenovo ideacentre 5 14iab7 firmware<m42kt46a
Lenovo ideacentre 5 14iab7
Lenovo Ideacentre 5 14irb8 Firmware<m4ukt36a
Lenovo Ideacentre 5 14irb8 Firmware
Lenovo Ideacentre Gaming 5-14acn6 Firmware
Lenovo Ideacentre Gaming 5-14acn6 Firmware
Lenovo Ideacentre T540-15AMA G Firmware
Lenovo Ideacentre T540-15AMA G Firmware
Lenovo ThinkCentre Neo 70T Gen 3 Firmware<m40kt45a
Lenovo ThinkCentre Neo 70T Gen 3 Firmware
Lenovo ThinkCentre Neo 50T Gen 3 Firmware<m42kt46a
Lenovo ThinkCentre Neo 50T Gen 3 Firmware
Lenovo ThinkCentre Neo 50A 24 Gen 4<o5xkt18a
Lenovo ThinkCentre Neo 50A 24 Gen 4 Firmware
Lenovo ThinkCentre Neo 50A 24 Gen 3<o5rkt41a
Lenovo ThinkCentre Neo 50A 24 Gen 3 Firmware
Lenovo ThinkCentre Neo 30a 27 Gen 4 Firmware<o5nkt33a
Lenovo ThinkCentre Neo 30a 27 Gen 4 Firmware=o5nkt33a
Lenovo ThinkCentre Neo 30a 27 Gen 4 Firmware
Lenovo ThinkCentre Neo 30A 27 Gen 3<o5nkt33a
Lenovo ThinkCentre Neo 30A 27 Gen 3
Lenovo ThinkCentre Neo 50A 24 Gen 4 Firmware<o5nkt33a
Lenovo ThinkCentre Neo 30A 24 Gen 4 Firmware
Lenovo ThinkCentre Neo 30a 24 Gen 3<o5nkt33a
Lenovo ThinkCentre Neo 30a 24 Gen 3
Lenovo ThinkCentre Neo 30a 22 Gen 4 Firmware<o5nkt33a
Lenovo ThinkCentre Neo 30a 22 Gen 4 Firmware
Lenovo ThinkCentre Neo 30a 22 Gen 3<o5nkt33a
Lenovo ThinkCentre Neo 30a 22 Gen 3 Firmware
Lenovo ThinkCentre M920z All-in-One Firmware<m1mkt56a
Lenovo ThinkCentre M920z All-in-One Firmware
Lenovo ThinkCentre M90t Gen 3 Firmware<m40kt45a
Lenovo ThinkCentre M90t Gen 3 Firmware
Lenovo Thinkcentre M90t Firmware<m2tkt55a
Lenovo ThinkCentre M90t Gen 3
Lenovo ThinkCentre M90s Gen 3<m40kt45a
Lenovo ThinkCentre M90s Gen 3
Lenovo ThinkCentre M90s Firmware<m2tkt55a
Lenovo ThinkCentre M90s Gen 3
Lenovo Ideacentre M90q Tiny Firmware
Lenovo ThinkCentre M90q Gen 3
Lenovo ThinkCentre M90q Gen 3 Firmware
Lenovo Ideacentre M90q Gen 3
Lenovo Ideacentre M90q Gen 2 Firmware
Lenovo Ideacentre M90q Gen 2 Firmware
Lenovo ThinkCentre M90a Pro Gen 3 Firmware<m4hkt1da
Lenovo ThinkCentre M90a Pro Gen 3 Firmware
Lenovo ThinkCentre M90a Gen 3 Firmware<m4ikt1da
Lenovo ThinkCentre M90a Gen 3 Firmware
Lenovo ThinkCentre M90a Gen 2 Firmware<m3lkt2aa
Lenovo Ideacentre M90a Gen 2 Firmware
Lenovo Thinkcentre M90a Gen 2 Firmware<m2rkt57a
Lenovo ThinkCentre M90a Tiny
Lenovo ThinkCentre M80t Firmware<m40kt45a
Lenovo Ideacentre M80t
Lenovo ThinkCentre M80t Firmware<m2tkt55a
Lenovo ThinkCentre M80t Gen 3
Lenovo ThinkCentre M80s Gen 3<m40kt45a
Lenovo ThinkCentre M80s Gen 3 Firmware
Lenovo Ideacentre M80s Firmware<m2tkt55a
Lenovo ThinkCentre M80s Gen 3
Lenovo ThinkCentre M80q Gen 3 Firmware
Lenovo ThinkCentre M80q Gen 3
Lenovo Ideacentre M80q
Lenovo Ideacentre M80q
Lenovo Ideacentre M75t Gen 2
Lenovo Thinkcentre M75t Gen 2 Firmware
Lenovo Ideacentre M75s Gen 2 Firmware
Lenovo Ideacentre M75s Gen 2 Firmware
Lenovo Ideacentre M75q Gen 2
Lenovo Ideacentre M75q Gen 2
Lenovo Thinkcentre M75n<m33kt29a
Lenovo Thinkcentre M75n
Lenovo Thinkcentre M70t Gen 3 Firmware<m41kt45a
Lenovo Ideacentre M70t Gen 3 Firmware
Lenovo ThinkCentre M70t<m2tkt55a
Lenovo ThinkCentre M70t
Lenovo ThinkCentre M70s Gen 3 Firmware<m41kt45a
Lenovo ThinkCentre M70s Gen 3
Lenovo ThinkCentre M70s Firmware<m2tkt55a
Lenovo ThinkCentre M70s
Lenovo Thinkcentre M70q Gen 2 Firmware
Lenovo ThinkCentre M70q Gen 2
Lenovo Thinkcentre M70q Firmware
Lenovo Thinkcentre M70q Firmware
Lenovo Thinkcentre M70c Firmware<m2vkt21a
Lenovo ThinkCentre M70c
Lenovo ThinkCentre M70a Gen 3
Lenovo ThinkCentre M70a
Lenovo ThinkCentre M630e<m28kt42a
Lenovo ThinkCentre M630e
Lenovo ThinkCentre M625q
Lenovo ThinkCentre M625q Firmware
Lenovo LOQ 17IRB8 Firmware<m4ukt36a
Lenovo LOQ 17IRB8 Firmware
Lenovo Legion T5 26IAB7<o5lkt2ba
Lenovo Legion T5 26IAB7 Firmware
Lenovo Legion T7-34IMZ5<o5fkt17a
Lenovo Legion T7-34IMZ5
Lenovo Legion T7-34IAZ7 Firmware<o5hkt2ca
Lenovo Legion T7-34IAZ7 Firmware
Lenovo Legion T7 34IRZ8<o5ukt1fa
Lenovo Legion T7 34IRZ8
Lenovo Legion T5 26IRB8 Firmware<o5tkt1ca
Lenovo Legion T5 26IRB8 Firmware
Lenovo Ideacentre Mini 5-01imh05 Firmware
Lenovo Ideacentre Mini 5-01imh05 Firmware
Lenovo Ideacentre Mini 5<o53kt10a
Lenovo Ideacentre Mini 5
Lenovo Ideacentre Creator 5-14iob6<m3gkt3da
Lenovo Ideacentre Gaming 5-14iob6 Firmware
Lenovo Ideacentre Gaming 5-14acn6 Firmware
Lenovo Ideacentre Gaming 5-14acn6 Firmware
Lenovo Ideacentre Gaming 5 17iab7<m42kt46a
Lenovo Ideacentre Gaming 5 17iab7
Lenovo Ideacentre Gaming 5 17acn7 Firmware
Lenovo Ideacentre Gaming 5 17acn7 Firmware
Lenovo ideacentre g5-14imb05<o4hkt3ca
Lenovo ideacentre g5-14imb05 firmware
Lenovo IdeaCentre G5-14AMR05 Firmware<o4zkt2ba
Lenovo ideacentre G5-14AMR05 firmware
Lenovo Ideacentre Creator 5-14iob6 Firmware<m3gkt3da
Lenovo Ideacentre Creator 5-14iob6 Firmware
Lenovo Ideacentre AIO 5 27IAH7<o5rkt41a
Lenovo Ideacentre AIO 5 27IAH7
Lenovo Ideacentre AIO 5 24IAH7<o5rkt41a
Lenovo Ideacentre AIO 5 24IAH7 Firmware
Lenovo ideacentre aio 3-27itl6 firmware<o5akt34a
Lenovo ideacentre aio 3-27itl6 firmware
Lenovo ideacentre aio 3-27imb05<o4rkt31a
Lenovo ideacentre aio 3-27imb05
Lenovo ideacentre aio 3-24itl6<o5akt34a
Lenovo ideacentre aio 3-24itl6 firmware
Lenovo ideacentre aio 3-24imb05 firmware<o4rkt31a
Lenovo ideacentre aio 3-24imb05
Lenovo Ideacentre AIO 3 24IIL5<o56kt24a
Lenovo Ideacentre AIO 3 24IIL5
Lenovo Ideacentre AIO 3-24ALC6 Firmware<o5bkt25a
Lenovo Ideacentre AIO 3-24ALC6 Firmware
Lenovo Ideacentre AIO 3-22ITL6 Firmware<o5akt34a
Lenovo Ideacentre AIO 3-22ITL6 Firmware
Lenovo ideacentre aio 3-27imb05<o4rkt31a
Lenovo ideacentre aio 3-22imb05 firmware
Lenovo Ideacentre AIO 3-22iIL5 Firmware<o56kt24a
Lenovo Ideacentre AIO 3-22iIL5 Firmware
Lenovo Ideacentre AIO 3 27IAP7 Firmware<o5nkt33a
Lenovo Ideacentre AIO 3 27IAP7 Firmware
Lenovo Ideacentre AIO 3 21ITL7<o5nkt33a
Lenovo Ideacentre AIO 3 24IAP7 Firmware
Lenovo Ideacentre AIO 3 21ITL7<o5nkt33a
Lenovo Ideacentre AIO 3 22iap7 Firmware
Lenovo Ideacentre AIO 3 21ITL7<o5akt34a
Lenovo Ideacentre AIO 3 21ITL7 Firmware
Lenovo Ideacentre Creator 5-14iob6 Firmware<m3gkt3da
Lenovo Ideacentre Gaming 5-14iob6 Firmware
Lenovo ideacentre 5-14imb05 firmware<o4hkt3ca
Lenovo ideacentre 5-14imb05 firmware
Lenovo V30a-22iml Firmware<m37kt31a
Lenovo V30a-22iml Firmware
Lenovo V30a-22ITL<o5akt34a
Lenovo V30a-22ITL
Lenovo v30a-24iml<m37kt31a
Lenovo V30a-24IML
Lenovo v30a-24itl<o5akt34a
Lenovo v30a-24itl firmware
Lenovo V50a-22IMB Firmware<m36kt32a
Lenovo V50a-22IMB Firmware
Lenovo v50a-24imb<m36kt32a
Lenovo V50a-24imb
Lenovo V50s-07imb<m2vkt21a
Lenovo V50s-07imb
Lenovo V50t-13imb G2 Firmware<o4hkt3ca
Lenovo V50t-13imb G2 Firmware
Lenovo v50t-13imh firmware<m4pkt16a
Lenovo v50t-13imh firmware
Lenovo V50t-13iob<m3gkt3da
Lenovo v50t-13iob firmware
Lenovo V55t Gen 2 13ACN<o5jkt2ca
Lenovo V55t Gen 2 13ACN
Lenovo Yoga AIO 7 27ARH7
Lenovo Yoga AIO 7 27ARH7 Firmware
Lenovo Yoga AIO 7-27ARH6
Lenovo Yoga AIO 7-27ARH6
Lenovo ThinkEdge SE30 Firmware
Lenovo ThinkEdge SE30 Firmware
Lenovo ThinkStation P920 Workstation
Lenovo ThinkStation P920 Workstation
Lenovo ThinkStation P720 Workstation Firmware
Lenovo ThinkStation P720 Workstation Firmware
Lenovo Thinkstation P520c Workstation Firmware
Lenovo Thinkstation P520c Workstation Firmware
Lenovo Thinkstation P520 Workstation Firmware
Lenovo ThinkStation P520
Lenovo ThinkStation P360 Ultra Workstation Firmware
Lenovo Thinkstation P360
Lenovo ThinkStation P360 Ultra Workstation Firmware<s0ekt45a
Lenovo ThinkStation P360 Firmware
Lenovo ThinkStation P360 Ultra Workstation Firmware
Lenovo Thinkstation P360 Tiny Firmware
Lenovo Thinkstation P360 Tiny Firmware
Lenovo ThinkStation P358 Workstation Firmware<s0hkt23a
Lenovo ThinkStation P358 Workstation
Lenovo Thinkstation P350 Workstation Firmware
Lenovo Thinkstation P350 Workstation
Lenovo ThinkStation P350 Tiny Firmware
Lenovo Thinkstation P350 Tiny Workstation
Lenovo ThinkStation P348 Workstation Firmware
Lenovo Thinkstation P348
Lenovo Thinkstation P340 Workstation Firmware<s08kt55a
Lenovo Thinkstation P340 Workstation Firmware
Lenovo Thinkstation P340 Tiny Firmware
Lenovo Thinkstation P340 Tiny Workstation
Lenovo ThinkStation P330 Gen 2 Firmware<m1vkt73a
Lenovo Thinkstation P330 Workstation
Lenovo ThinkStation P330 Tiny Workstation Firmware<m1vkt73a
Lenovo ThinkStation P330 Tiny
Lenovo Thinkstation P320 Workstation Firmware
Lenovo Thinkstation P320 Tiny Workstation

Remedy

Update system firmware to the version (or newer) indicated for your model in the advisory:  https://support.lenovo.com/us/en/product_security/LEN-141775

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2023-43580?

    CVE-2023-43580 has a high severity rating due to the potential for local attackers to execute arbitrary code.

  • How do I fix CVE-2023-43580?

    To fix CVE-2023-43580, update the affected firmware to the latest version provided by Lenovo.

  • Which Lenovo products are affected by CVE-2023-43580?

    CVE-2023-43580 affects various Lenovo Desktop products, specifically those utilizing the SmuV11DxeVMR module.

  • Can CVE-2023-43580 be exploited remotely?

    No, CVE-2023-43580 requires local access and elevated privileges to be exploited.

  • What potential impact does CVE-2023-43580 have?

    The potential impact of CVE-2023-43580 includes arbitrary code execution, which can compromise the security of affected systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203