CVE-2023-43568

MEDIUM

Lenovo IdeaCentre and ThinkCentre Firmware - Buffer Over-read in LemSecureBootForceKey Module

Title source: llm

Description

A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

References (1)

Core 1

Core References

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-141775

Scores

CVSS v3 4.4

EPSS 0.0021

EPSS Percentile 11.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-126

Status published

Products (50)

lenovo/ideacentre_3-07ada05_firmware < o4fkt39a

lenovo/ideacentre_3-07imb05_firmware < m2vkt21a

lenovo/ideacentre_5-14acn6_firmware

lenovo/ideacentre_5-14imb05_firmware < o4hkt3ca

lenovo/ideacentre_5-14iob6_firmware < m3gkt3da

lenovo/ideacentre_5_14iab7_firmware < m42kt46a

lenovo/ideacentre_5_14irb8_firmware < m4ukt36a

lenovo/ideacentre_aio_3-22iil5_firmware < o56kt24a

lenovo/ideacentre_aio_3-22imb05_firmware < o4rkt31a

lenovo/ideacentre_aio_3-22itl6_firmware < o5akt34a

... and 40 more

Published Nov 08, 2023

Tracked Since Feb 18, 2026