CVE-2023-2290 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.4 MEDIUM	LOCAL	HIGH	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
lenovo	CNA	6.4 MEDIUM	LOCAL	HIGH	HIGH	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 7%

Vendor	Product	Version
lenovo	thinkpad_e14_firmware	1.23
lenovo	thinkpad_e14_gen_2_firmware	1.55
lenovo	thinkpad_e14_gen_4_firmware	1.18
lenovo	thinkpad_e14_gen_4_firmware	1.16
lenovo	thinkpad_e15_firmware	1.23
lenovo	thinkpad_e15_gen_2_firmware	1.55
lenovo	thinkpad_e15_gen_4_firmware	1.18
lenovo	thinkpad_e15_gen_4_firmware	1.16
lenovo	thinkpad_e490_firmware	1.34
lenovo	thinkpad_e490s_firmware	1.34
lenovo	thinkpad_e590_firmware	1.34
lenovo	thinkpad_l13_gen_3_firmware	1.14
lenovo	thinkpad_l13_yoga_gen_3_firmware	1.14
lenovo	thinkpad_l14_firmware	1.2
lenovo	thinkpad_l14_firmware	1.3
lenovo	thinkpad_l14_firmware	1.48
lenovo	thinkpad_l14_firmware	1.61
lenovo	thinkpad_l14_firmware	1.26
lenovo	thinkpad_l15_firmware	1.2
lenovo	thinkpad_l15_firmware	1.3
lenovo	thinkpad_l15_gen_2_firmware	1.48
lenovo	thinkpad_l15_gen_2_firmware	1.61
lenovo	thinkpad_l15_gen_3_firmware	1.26
lenovo	thinkpad_l490_firmware	1.32
lenovo	thinkpad_l590_firmware	1.32
lenovo	thinkpad_p1_gen_2_firmware	1.46
lenovo	thinkpad_p1_gen_3_firmware	1.27
lenovo	thinkpad_p1_gen_4_firmware	1.22
lenovo	thinkpad_p1_gen_5_firmware	1.16
lenovo	thinkpad_p14s_gen_1_firmware	1.28
lenovo	thinkpad_p14s_gen_2_firmware	1.05
lenovo	thinkpad_p14s_gen_2_firmware	1.55
lenovo	thinkpad_p14s_gen_2_firmware	1.34
lenovo	thinkpad_p14s_gen_3_firmware	1.11
lenovo	thinkpad_p14s_gen_3_firmware	1.31
lenovo	thinkpad_p15_gen_1_firmware	1.32
lenovo	thinkpad_p15_gen_2_firmware	1.25
lenovo	thinkpad_p15s_gen_1_firmware	1.28
lenovo	thinkpad_p15s_gen_2_firmware	1.05
lenovo	thinkpad_p15s_gen_2_firmware	1.55
lenovo	thinkpad_p15v_gen_1_firmware	1.32
lenovo	thinkpad_p15v_gen_2_firmware	1.19
lenovo	thinkpad_p15v_gen_3_firmware	1.15
lenovo	thinkpad_p16_gen_1_firmware	1.17
lenovo	thinkpad_p16s_gen_1_firmware	1.11
lenovo	thinkpad_p16s_gen_1_firmware	1.31
lenovo	thinkpad_p17_gen_1_firmware	1.32
lenovo	thinkpad_p17_gen_2_firmware	1.25
lenovo	thinkpad_p43s_firmware	1.21
lenovo	thinkpad_p43s_firmware	1.79
lenovo	thinkpad_p53_firmware	1.4
lenovo	thinkpad_p53s_firmware	1.21
lenovo	thinkpad_p53s_firmware	1.79
lenovo	thinkpad_p73_firmware	1.4
lenovo	thinkpad_t14_gen_1_firmware	1.28
lenovo	thinkpad_t14_gen_1_firmware	1.28
lenovo	thinkpad_t14_gen_2_firmware	1.05
lenovo	thinkpad_t14_gen_2_firmware	1.55
lenovo	thinkpad_t14_gen_2_firmware	1.34
lenovo	thinkpad_t14_gen_3_firmware	1.11
lenovo	thinkpad_t14_gen_3_firmware	1.31
lenovo	thinkpad_t14s_firmware	1.26
lenovo	thinkpad_t14s_gen_2_firmware	1.51
lenovo	thinkpad_t14s_gen_2_firmware	1.37
lenovo	thinkpad_t14s_gen_3_firmware	1.33
lenovo	thinkpad_t15_firmware	1.28
lenovo	thinkpad_t15_gen_2_firmware	1.05
lenovo	thinkpad_t15_gen_2_firmware	1.55
lenovo	thinkpad_t15g_gen_1_firmware	1.32
lenovo	thinkpad_t15g_gen_2_firmware	1.25
lenovo	thinkpad_t15p_gen_1_firmware	1.32
lenovo	thinkpad_t15p_gen_2_firmware	1.19
lenovo	thinkpad_t15p_gen_3_firmware	1.15
lenovo	thinkpad_t16_gen_1_firmware	1.11
lenovo	thinkpad_t16_gen_1_firmware	1.31
lenovo	thinkpad_t490_firmware	1.21
lenovo	thinkpad_t490_firmware	1.79
lenovo	thinkpad_t490_firmware	1.21
lenovo	thinkpad_t490_firmware	1.79
lenovo	thinkpad_t490_firmware	1.21
lenovo	thinkpad_t490_firmware	1.79
lenovo	thinkpad_t490s_firmware	1.24
lenovo	thinkpad_t490s_firmware	1.79
lenovo	thinkpad_t590_firmware	1.21
lenovo	thinkpad_t590_firmware	1.79
lenovo	thinkpad_thinkpad_r14_gen_2_firmware	1.55
lenovo	thinkpad_thinkpad_r14_gen_4_firmware	1.18
lenovo	thinkpad_thinkpad_s3_2nd_gen_firmware	1.23
lenovo	thinkpad_x1_carbon_10th_gen_firmware	1.37
lenovo	thinkpad_x1_carbon_7th_gen_firmware	1.45
lenovo	thinkpad_x1_carbon_7th_gen_firmware	1.56
lenovo	thinkpad_x1_carbon_7th_gen_firmware	1.45
lenovo	thinkpad_x1_carbon_7th_gen_firmware	1.56
lenovo	thinkpad_x1_carbon_8th_gen_firmware	1.15
lenovo	thinkpad_x1_carbon_8th_gen_firmware	1.30
lenovo	thinkpad_x1_carbon_9th_gen_firmware	1.59
lenovo	thinkpad_x1_extreme_2nd_gen_firmware	1.46
lenovo	thinkpad_x1_extreme_3rd_gen_firmware	1.27
lenovo	thinkpad_x1_extreme_4th_gen_firmware	1.22
lenovo	thinkpad_x1_extreme_gen_5_firmware	1.16
lenovo	thinkpad_x1_nano_gen_1_firmware	1.55
lenovo	thinkpad_x1_nano_gen_2_firmware	1.18
lenovo	thinkpad_x1_titanium_firmware	1.24
lenovo	thinkpad_x1_yoga_4th_gen_firmware	1.45
lenovo	thinkpad_x1_yoga_4th_gen_firmware	1.56
lenovo	thinkpad_x1_yoga_4th_gen_firmware	1.45
lenovo	thinkpad_x1_yoga_4th_gen_firmware	1.56
lenovo	thinkpad_x1_yoga_5th_gen_firmware	1.15
lenovo	thinkpad_x1_yoga_5th_gen_firmware	1.30
lenovo	thinkpad_x1_yoga_6th_gen_firmware	1.59
lenovo	thinkpad_x1_yoga_7th_gen_firmware	1.37
lenovo	thinkpad_x12_detachable_gen_1_firmware	1.28
lenovo	thinkpad_x13_firmware	1.26
lenovo	thinkpad_x13_gen_2_firmware	1.51
lenovo	thinkpad_x13_gen_2_firmware	1.37
lenovo	thinkpad_x13_gen_3_firmware	1.33
lenovo	thinkpad_x13_yoga_gen_1_firmware	1.45
lenovo	thinkpad_x13_yoga_gen_2_firmware	1.4
lenovo	thinkpad_x13_yoga_gen_3_firmware	1.09
lenovo	thinkpad_x390_firmware	1.79_1.24:_1.24
lenovo	thinkpad_x390_firmware	1.24
lenovo	thinkpad_x390_firmware	1.79
lenovo	thinkpad_x390_yoga_firmware	1.95
lenovo	thinkpad_z13_gen_1_firmware	1.57
lenovo	thinkpad_z16_gen_1_firmware	1.57

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-787 - Out-of-bounds Write
The software writes data past the end, or before the beginning, of the intended buffer.

References

https://support.lenovo.com/us/en/product_security/LEN-106014