Vulnerability-Lookup

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Full-Text Search

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

BDU:2024-02258 (CVE-2023-28746)

Vulnerability from fstec – Published: 2024-03-22 – Updated: 2025-11-19 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения процессоров Intel, связанная с утечкой информации из векторных регистров, позволяющая нарушителю получить доступ к защищаемой информации

Summary

Уязвимость микропрограммного обеспечения процессоров Intel связана с утечкой информации из векторных регистров. Эксплуатация уязвимости может позволить нарушителю получить доступ к защищаемой информации

Severity

4.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:N/A:N

6.5 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Information gathering

Incidents

Being clarified

Remediation

Software update

CWE

CWE-1342 - Раскрытие информации через микроархитектурное состояние после переходного выполнения

Aliases

CVE-2023-28746, INTEL-SA-00898, LEN-155477

References

20 references

URL
https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-28746
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.215
https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.154
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.82
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.22
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.10
https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8.1
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28746
https://security-tracker.debian.org/tracker/CVE-2023-28746
https://support.lenovo.com/us/en/product_security/LEN-155477
https://www.intel.com/content/www/us/en/developer/articles/technical/software-s…
https://www.intel.com/content/www/us/en/developer/topic-technology/software-sec…
https://www.openwall.com/lists/oss-security/2024/03/12/13
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.10.1/
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.11/
https://altsp.su/obnovleniya-bezopasnosti/
https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17
https://abf.rosa.ru/advisories/ROSA-SA-2025-2811
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.14/
https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru

Impacted products

93 products from 9 vendors

Vendors

Microsoft Corp, Intel Corp., Сообщество свободного программного обеспечения, ООО «РусБИТех-Астра», АО «ИВК», Lenovo Group Limited, АО «НППКТ», АО «НТЦ ИТ РОСА», ООО «НЦПР»

Products

Windows Server 2008 Service Pack 2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2 Service Pack 1, Windows 10, Windows 10 1607, Windows Server 2016, Windows Server 2008 Service Pack 2 (Server Core Installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1 (Server Core installation), Intel Celeron, Windows 10 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Intel Atom C Series, Intel Pentium Gold Series, Intel Celeron J Series, Intel Celeron N Series, Intel Atom X series, Intel Atom Processor E3900 Series, Intel Pentium Processor Silver Series, Debian GNU/Linux, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 21H2, Astra Linux Special Edition (запись в едином реестре российских программ №369), 12th Generation Intel Core Processor Family, Альт 8 СП (запись в едином реестре российских программ №4305), Windows 11 22H2, Windows 10 22H2, Windows 11 21H2, Windows Server 2012 (Server Core installation), 13th Generation Intel Core Processor Family, Intel Processor U-series, Windows 11 23H2, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, ThinkCentre Neo 50t Gen 4, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 100w Gen 3 Laptop (Lenovo), 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), IdeaPad 1-11IGL05 Laptop, IdeaPad 1-14IGL05 Laptop, IdeaPad Duet 3 10IGL5, IdeaPad Duet 3 11IAN8, ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AW), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, Intel Atom Processor C5000, Intel Management Engine, Intel Atom Processor P5300, Intel Atom Processor P5700, Intel Atom Processor P5900, 14th Generation Intel Core Processor Family, Intel Processor N Series, Intel Core Processor N Series, Linux, 23H2 Edition (Server Core installation), ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), ROSA Virtualization 3.0 (запись в едином реестре российских программ №21308), МСВСфера

Versions

- (Windows Server 2008 Service Pack 2), - (Windows Server 2012), - (Windows Server 2012 R2), - (Windows Server 2008 R2 Service Pack 1), - (Windows 10), - (Windows 10 1607), - (Windows Server 2016), - (Windows Server 2008 Service Pack 2 (Server Core Installation)), - (Windows Server 2012 R2 (Server Core installation)), - (Windows Server 2016 (Server Core installation)), - (Windows Server 2008 R2 Service Pack 1 (Server Core installation)), - (Intel Celeron), - (Windows 10 1809), - (Windows Server 2019), - (Windows Server 2019 (Server Core installation)), - (Intel Atom C Series), - (Intel Pentium Gold Series), - (Intel Celeron J Series), - (Intel Celeron N Series), - (Intel Atom X series), - (Intel Atom Processor E3900 Series), - (Intel Pentium Processor Silver Series), 10 (Debian GNU/Linux), - (Windows Server 2022), - (Windows Server 2022 (Server Core installation)), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), - (Windows 10 21H2), 1.7 (Astra Linux Special Edition), - (12th Generation Intel Core Processor Family), - (Альт 8 СП), - (Windows 11 22H2), - (Windows 10 22H2), - (Windows 11 21H2), - (Windows Server 2012 (Server Core installation)), - (13th Generation Intel Core Processor Family), - (Intel Processor U-series), - (Windows 11 23H2), до M2VKT23A (IdeaCentre 3-07IMB05), до M42KT4AA (IdeaCentre 5 14IAB7), до M4UKT3DA (IdeaCentre 5 14IRB8), до M42KT4AA (IdeaCentre Gaming 5 17IAB7), до O5TKT34A (Legion T5 26IRB8), до O5UKT37A (Legion T7 34IRZ8), до M4UKT3DA (LOQ 17IRB8), до M2VKT23A (ThinkCentre M70c), до M3JKT3DA (ThinkCentre M70q Gen 2), до M2RKT58A (ThinkCentre M90a), до M3LKT2BA (ThinkCentre M90a Gen 2), до M4IKT21A (ThinkCentre M90a Gen 3), до M4HKT22A (ThinkCentre M90a Gen 3 Pro), до M3JKT3DA (ThinkCentre M90q Gen 2), до M42KT4AA (ThinkCentre Neo 50t Gen 3), до M4UKT3DA (ThinkCentre Neo 50t Gen 4), до M36KT33A (Lenovo V50a-22IMB), до M36KT33A (Lenovo V50a-24IMB), до M2VKT23A (Lenovo V50s-07IMB), до M4PKT17A (Lenovo V50t-13IMH), до L2CN32WW (100w Gen 3 Laptop (Lenovo)), до L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), до L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), до DWCN30WW (IdeaPad 1-11IGL05 Laptop), до DWCN30WW (IdeaPad 1-14IGL05 Laptop), до EQCN41WW (IdeaPad Duet 3 10IGL5), до LSCN25WW (IdeaPad Duet 3 11IAN8), до 1.21 (ThinkPad L13 Gen 3 Type (21B3)), до 1.21 (ThinkPad L13 Gen 3 Type (21B4)), до 1.21 (ThinkPad L13 Gen 3 Type (21B5)), до 1.21 (ThinkPad L13 Gen 3 Type (21B6)), до 1.34 (ThinkPad L14 Gen 3 Type (21C1)), до 1.34 (ThinkPad L14 Gen 3 Type (21C2)), до 1.34 (ThinkPad L15 Gen 3 Type (21C3)), до 1.34 (ThinkPad L15 Gen 3 Type (21C4)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), до 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AW)), до 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), до M3JKT3DA (ThinkStation P350 Tiny Workstation), до TOE112B (ThinkSystem ST50 V2), до TOE112B (ThinkSystem ST58 V2), - (Intel Atom Processor C5000), Intel Atom Processor P5300 (Intel Management Engine), - (Intel Atom Processor P5300), - (Intel Atom Processor P5700), - (Intel Atom Processor P5900), - (14th Generation Intel Core Processor Family), - (Intel Processor N Series), - (Intel Core Processor N Series), от 4.0 до 5.10.214 включительно (Linux), от 5.11 до 5.15.153 включительно (Linux), от 5.16 до 6.1.81 включительно (Linux), от 6.2 до 6.6.21 включительно (Linux), от 6.7.0 до 6.7.9 включительно (Linux), - (Windows Server 2022, 23H2 Edition (Server Core installation)), до 2.10.1 (ОСОН ОСнова Оnyx), 6.8.0 (Linux), до 2.11 (ОСОН ОСнова Оnyx), 3.0 (ROSA Virtualization 3.0), до 2.14 (ОСОН ОСнова Оnyx), 9.5 (МСВСфера)

Product types

Operating system, Appliance software, Firmware, Virtualization software

Platforms

Microsoft Corp Windows Server 2008 Service Pack 2 - 64-bit, Microsoft Corp Windows Server 2012 -, Microsoft Corp Windows Server 2012 R2 -, Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit, Microsoft Corp Windows 10 - 64-bit, Microsoft Corp Windows 10 - 32-bit, Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Microsoft Corp Windows Server 2016 -, Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 64-bit, Microsoft Corp Windows Server 2012 R2 (Server Core installation) -, Microsoft Corp Windows Server 2016 (Server Core installation) -, Microsoft Corp Windows Server 2008 R2 Service Pack 1 (Server Core installation) - 64-bit, Microsoft Corp Windows 10 1809 - 64-bit, Microsoft Corp Windows 10 1809 - 32-bit, Microsoft Corp Windows Server 2019 -, Microsoft Corp Windows Server 2019 (Server Core installation) -, Сообщество свободного программного обеспечения Debian GNU/Linux 10, Microsoft Corp Windows Server 2022 -, Microsoft Corp Windows Server 2022 (Server Core installation) -, Сообщество свободного программного обеспечения Debian GNU/Linux 11, Сообщество свободного программного обеспечения Debian GNU/Linux 12, Microsoft Corp Windows 10 21H2 - 64-bit, Microsoft Corp Windows 10 21H2 - 32-bit, ООО «РусБИТех-Астра» Astra Linux Special Edition 1.7 (запись в едином реестре российских программ №369), АО «ИВК» Альт 8 СП - (запись в едином реестре российских программ №4305), Microsoft Corp Windows 11 22H2 - 64-bit, Microsoft Corp Windows 10 22H2 - 64-bit, Microsoft Corp Windows 10 22H2 - 32-bit, Microsoft Corp Windows 11 21H2 - 64-bit, Microsoft Corp Windows Server 2012 (Server Core installation) -, Microsoft Corp Windows 11 23H2 - 64-bit, Microsoft Corp Windows Server 2022, 23H2 Edition (Server Core installation) -, АО «НППКТ» ОСОН ОСнова Оnyx до 2.10.1 (запись в едином реестре российских программ №5913), АО «НППКТ» ОСОН ОСнова Оnyx до 2.11 (запись в едином реестре российских программ №5913), АО «НТЦ ИТ РОСА» ROSA Virtualization 3.0 3.0 (запись в едином реестре российских программ №21308), АО «НППКТ» ОСОН ОСнова Оnyx до 2.14 (запись в едином реестре российских программ №5913), ООО «НЦПР» МСВСфера 9.5

Mitigations

Использование рекомендаций: Для Linux: https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.215 https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.154 https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.82 https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.22 https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.10 https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8.1 Для Lenovo: https://support.lenovo.com/us/en/product_security/LEN-155477 Для Microsoft Windows: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28746 Для Intel: https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html Для Debian GNU/Linux: https://security-tracker.debian.org/tracker/CVE-2023-28746 Для ОСОН ОСнова Оnyx: Обновление программного обеспечения linux до версии 6.6.27-0.osnova229 Для ОСОН ОСнова Оnyx (2.11): Обновление программного обеспечения intel-microcode до версии 3.20240312.1~deb10u1 Для ОС Альт 8 СП: установка обновления из публичного репозитория программного средства Для ОС Astra Linux: - обновить пакет intel-microcode до 3.20240813.1~deb12u1+ci202409161120+astra3 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 - обновить пакет linux-5.10 до 5.10.216-1.astra2+ci2 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 - обновить пакет linux-6.1 до 6.1.90-1.astra3+ci20 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 Для программной системы управления средой виртуализации с подсистемой безагентного резервного копирования виртуальных машин «ROSA Virtualization 3.0»: https://abf.rosa.ru/advisories/ROSA-SA-2025-2811 Обновление программного обеспечения xen до версии 4.17.5+23-ga4e5191dc0-1+deb12u1 Для МСВСфера: https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru

Remediation

TO1098 Накопительное обновление Windows 10 22H2 для x64 систем (KB5035845), TO1099 Накопительное обновление Windows 10 22H2 для x32 систем (KB5035845), TO1102 Накопительное обновление Windows 11 для x64 систем (KB5035854), TO1104 Накопительное обновление Windows Server 2019 для x64 систем (KB5035849), TO1152 Накопительное обновление Windows Server 2016 для x64 систем (KB5037423)

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "TO1098, TO1099, TO1102, TO1104, TO1152",
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": "TO1098 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows 10 22H2 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5035845), TO1099 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows 10 22H2 \u0434\u043b\u044f x32 \u0441\u0438\u0441\u0442\u0435\u043c (KB5035845), TO1102 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows 11 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5035854), TO1104 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows Server 2019 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5035849), TO1152 \u041d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Windows Server 2016 \u0434\u043b\u044f x64 \u0441\u0438\u0441\u0442\u0435\u043c (KB5037423)",
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Microsoft Corp, Intel Corp., \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb, Lenovo Group Limited, \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb, \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb, \u041e\u041e\u041e \u00ab\u041d\u0426\u041f\u0420\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Windows Server 2008 Service Pack 2), - (Windows Server 2012), - (Windows Server 2012 R2), - (Windows Server 2008 R2 Service Pack 1), - (Windows 10), - (Windows 10 1607), - (Windows Server 2016), - (Windows Server 2008 Service Pack 2 (Server Core Installation)), - (Windows Server 2012 R2 (Server Core installation)), - (Windows Server 2016 (Server Core installation)), - (Windows Server 2008 R2 Service Pack 1 (Server Core installation)), - (Intel Celeron), - (Windows 10 1809), - (Windows Server 2019), - (Windows Server 2019 (Server Core installation)), - (Intel Atom C Series), - (Intel Pentium Gold Series), - (Intel Celeron J Series), - (Intel Celeron N Series), - (Intel Atom X series), - (Intel Atom Processor E3900 Series), - (Intel Pentium Processor Silver Series), 10 (Debian GNU/Linux), - (Windows Server 2022), - (Windows Server 2022 (Server Core installation)), 11 (Debian GNU/Linux), 12 (Debian GNU/Linux), - (Windows 10 21H2), 1.7 (Astra Linux Special Edition), - (12th Generation Intel Core Processor Family), - (\u0410\u043b\u044c\u0442 8 \u0421\u041f), - (Windows 11 22H2), - (Windows 10 22H2), - (Windows 11 21H2), - (Windows Server 2012 (Server Core installation)), - (13th Generation Intel Core Processor Family), - (Intel Processor U-series), - (Windows 11 23H2), \u0434\u043e M2VKT23A (IdeaCentre 3-07IMB05), \u0434\u043e M42KT4AA (IdeaCentre 5 14IAB7), \u0434\u043e M4UKT3DA (IdeaCentre 5 14IRB8), \u0434\u043e M42KT4AA (IdeaCentre Gaming 5 17IAB7), \u0434\u043e O5TKT34A (Legion T5 26IRB8), \u0434\u043e O5UKT37A (Legion T7 34IRZ8), \u0434\u043e M4UKT3DA (LOQ 17IRB8), \u0434\u043e M2VKT23A (ThinkCentre M70c), \u0434\u043e M3JKT3DA (ThinkCentre M70q Gen 2), \u0434\u043e M2RKT58A (ThinkCentre M90a), \u0434\u043e M3LKT2BA (ThinkCentre M90a Gen 2), \u0434\u043e M4IKT21A (ThinkCentre M90a Gen 3), \u0434\u043e M4HKT22A (ThinkCentre M90a Gen 3 Pro), \u0434\u043e M3JKT3DA (ThinkCentre M90q Gen 2), \u0434\u043e M42KT4AA (ThinkCentre Neo 50t Gen 3), \u0434\u043e M4UKT3DA (ThinkCentre Neo 50t Gen 4), \u0434\u043e M36KT33A (Lenovo V50a-22IMB), \u0434\u043e M36KT33A (Lenovo V50a-24IMB), \u0434\u043e M2VKT23A (Lenovo V50s-07IMB), \u0434\u043e M4PKT17A (Lenovo V50t-13IMH), \u0434\u043e L2CN32WW (100w Gen 3 Laptop (Lenovo)), \u0434\u043e L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e DWCN30WW (IdeaPad 1-11IGL05 Laptop), \u0434\u043e DWCN30WW (IdeaPad 1-14IGL05 Laptop), \u0434\u043e EQCN41WW (IdeaPad Duet 3 10IGL5), \u0434\u043e LSCN25WW (IdeaPad Duet 3 11IAN8), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B3)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B4)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B5)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B6)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C1)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C2)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C3)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C4)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), \u0434\u043e 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AW)), \u0434\u043e 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), \u0434\u043e M3JKT3DA (ThinkStation P350 Tiny Workstation), \u0434\u043e TOE112B (ThinkSystem ST50 V2), \u0434\u043e TOE112B (ThinkSystem ST58 V2), - (Intel Atom Processor C5000), Intel Atom Processor P5300 (Intel Management Engine), - (Intel Atom Processor P5300), - (Intel Atom Processor P5700), - (Intel Atom Processor P5900), - (14th Generation Intel Core Processor Family), - (Intel Processor N Series), - (Intel Core Processor N Series), \u043e\u0442 4.0 \u0434\u043e 5.10.214 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.11 \u0434\u043e 5.15.153 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 5.16 \u0434\u043e 6.1.81 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 6.2 \u0434\u043e 6.6.21 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), \u043e\u0442 6.7.0 \u0434\u043e 6.7.9 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Linux), - (Windows Server 2022, 23H2 Edition (Server Core installation)), \u0434\u043e 2.10.1 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), 6.8.0 (Linux), \u0434\u043e 2.11 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), 3.0 (ROSA Virtualization 3.0), \u0434\u043e 2.14 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), 9.5 (\u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f Linux:\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.215\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.154\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.82\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.22\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.10\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8.1\n\n\u0414\u043b\u044f Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477\n\n\u0414\u043b\u044f Microsoft Windows:\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28746\n\n\u0414\u043b\u044f Intel:\nhttps://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html\n\n\u0414\u043b\u044f Debian GNU/Linux:\nhttps://security-tracker.debian.org/tracker/CVE-2023-28746\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx:\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f linux \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 6.6.27-0.osnova229\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (2.11):\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f intel-microcode \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.20240312.1~deb10u1\n\n\u0414\u043b\u044f \u041e\u0421 \u0410\u043b\u044c\u0442 8 \u0421\u041f: \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n- \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 intel-microcode \u0434\u043e 3.20240813.1~deb12u1+ci202409161120+astra3 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\n- \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 linux-5.10 \u0434\u043e 5.10.216-1.astra2+ci2 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\n- \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 linux-6.1 \u0434\u043e 6.1.90-1.astra3+ci20 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u0430\u0433\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u00abROSA Virtualization 3.0\u00bb: https://abf.rosa.ru/advisories/ROSA-SA-2025-2811\n\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f xen \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 4.17.5+23-ga4e5191dc0-1+deb12u1\n\n\u0414\u043b\u044f \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430: https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "19.11.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "22.03.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02258",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-28746, INTEL-SA-00898, LEN-155477",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Windows Server 2008 Service Pack 2, Windows Server 2012, Windows Server 2012 R2, Windows Server 2008 R2 Service Pack 1, Windows 10, Windows 10 1607, Windows Server 2016, Windows Server 2008 Service Pack 2 (Server Core Installation), Windows Server 2012 R2 (Server Core installation), Windows Server 2016 (Server Core installation), Windows Server 2008 R2 Service Pack 1 (Server Core installation), Intel Celeron, Windows 10 1809, Windows Server 2019, Windows Server 2019 (Server Core installation), Intel Atom C Series, Intel Pentium Gold Series, Intel Celeron J Series, Intel Celeron N Series, Intel Atom X series, Intel Atom Processor E3900 Series, Intel Pentium Processor Silver Series, Debian GNU/Linux, Windows Server 2022, Windows Server 2022 (Server Core installation), Windows 10 21H2, Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), 12th Generation Intel Core Processor Family, \u0410\u043b\u044c\u0442 8 \u0421\u041f (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), Windows 11 22H2, Windows 10 22H2, Windows 11 21H2, Windows Server 2012 (Server Core installation), 13th Generation Intel Core Processor Family, Intel Processor U-series, Windows 11 23H2, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, ThinkCentre Neo 50t Gen 4, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 100w Gen 3 Laptop (Lenovo), 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), IdeaPad 1-11IGL05 Laptop, IdeaPad 1-14IGL05 Laptop, IdeaPad Duet 3 10IGL5, IdeaPad Duet 3 11IAN8, ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AW), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, Intel Atom Processor C5000, Intel Management Engine, Intel Atom Processor P5300, Intel Atom Processor P5700, Intel Atom Processor P5900, 14th Generation Intel Core Processor Family, Intel Processor N Series, Intel Core Processor N Series, Linux, Windows Server 2022, 23H2 Edition (Server Core installation), \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), ROSA Virtualization 3.0 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211621308), \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Microsoft Corp Windows Server 2008 Service Pack 2 - 64-bit, Microsoft Corp Windows Server 2012 - , Microsoft Corp Windows Server 2012 R2 - , Microsoft Corp Windows Server 2008 R2 Service Pack 1 - 64-bit, Microsoft Corp Windows 10 - 64-bit, Microsoft Corp Windows 10 - 32-bit, Microsoft Corp Windows 10 1607 - 64-bit, Microsoft Corp Windows 10 1607 - 32-bit, Microsoft Corp Windows Server 2016 - , Microsoft Corp Windows Server 2008 Service Pack 2 (Server Core Installation) - 64-bit, Microsoft Corp Windows Server 2012 R2 (Server Core installation) - , Microsoft Corp Windows Server 2016 (Server Core installation) - , Microsoft Corp Windows Server 2008 R2 Service Pack 1 (Server Core installation) - 64-bit, Microsoft Corp Windows 10 1809 - 64-bit, Microsoft Corp Windows 10 1809 - 32-bit, Microsoft Corp Windows Server 2019 - , Microsoft Corp Windows Server 2019 (Server Core installation) - , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 10 , Microsoft Corp Windows Server 2022 - , Microsoft Corp Windows Server 2022 (Server Core installation) - , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 11 , \u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f Debian GNU/Linux 12 , Microsoft Corp Windows 10 21H2 - 64-bit, Microsoft Corp Windows 10 21H2 - 32-bit, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \u00ab\u0418\u0412\u041a\u00bb \u0410\u043b\u044c\u0442 8 \u0421\u041f -  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21164305), Microsoft Corp Windows 11 22H2 - 64-bit, Microsoft Corp Windows 10 22H2 - 64-bit, Microsoft Corp Windows 10 22H2 - 32-bit, Microsoft Corp Windows 11 21H2 - 64-bit, Microsoft Corp Windows Server 2012 (Server Core installation) - , Microsoft Corp Windows 11 23H2 - 64-bit, Microsoft Corp Windows Server 2022, 23H2 Edition (Server Core installation) - , \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.10.1  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.11  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb ROSA Virtualization 3.0 3.0  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211621308), \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.14  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u041e\u041e\u041e \u00ab\u041d\u0426\u041f\u0420\u00bb \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430 9.5 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0432\u0435\u043a\u0442\u043e\u0440\u043d\u044b\u0445 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f (CWE-1342)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u0437 \u0432\u0435\u043a\u0442\u043e\u0440\u043d\u044b\u0445 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=2023-28746\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.215\nhttps://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.154\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.82\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.22\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7.10\nhttps://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.8.1\nhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28746\nhttps://security-tracker.debian.org/tracker/CVE-2023-28746\nhttps://support.lenovo.com/us/en/product_security/LEN-155477\nhttps://www.intel.com/content/www/us/en/developer/articles/technical/software-security-guidance/advisory-guidance/register-file-data-sampling.html\nhttps://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html\nhttps://www.openwall.com/lists/oss-security/2024/03/12/13\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.10.1/\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.11/\nhttps://altsp.su/obnovleniya-bezopasnosti/\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\nhttps://abf.rosa.ru/advisories/ROSA-SA-2025-2811\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.14/\nhttps://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-1342",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,5)"
}

BDU:2024-02522 (CVE-2023-32282)

Vulnerability from fstec – Published: 2024-04-03 – Updated: 2024-04-03 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения процессоров Intel, связанная с ошибками синхронизации при использовании общего ресурса, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость микропрограммного обеспечения процессоров Intel связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

5.3 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:M/C:N/I:C/A:C

7.2 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Timing and state manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-367 - Ситуация гонки Time-of-check Time-of-use (TOCTOU)

Aliases

CVE-2023-32282, INTEL-SA-00929, LEN-155477

References

2 references

URL
https://support.lenovo.com/us/en/product_security/LEN-155477
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html

Impacted products

122 products from 2 vendors

Vendors

Intel Corp., Lenovo Group Limited

Products

Intel Pentium Gold Series, Intel Celeron Processor Family, 10th Generation Intel Core Processor Family, 12th Generation Intel Core Processor Family, 11th Generation Intel Core Processor Family, Intel Celeron J6413, Intel Celeron N6211, Intel Pentium J6425, Intel Pentium N6415, Intel Atom X6211E, Intel Atom X6413E, Intel Atom X6425E, Intel Atom X6212RE, Intel Atom X6414RE, Intel Atom X6425RE, Intel Atom X6427FE, Intel Atom X6200FE, Intel Core i7-11700, Intel Core i7-11700t, Intel Core i5-11400t, Intel Core i5-11500, Intel Core i5-11500t, Intel Core i5-11400, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 7 16IAX7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, ThinkCentre Neo 50a 24 Gen 3 Desktop, ThinkCentre Neo 50a 24 Gen 4 Desktop, 100w Gen 4 Laptop (Lenovo), IdeaPad Flex 5 14IAU7 Laptop, IdeaPad Flex 5 16IAU7, Legion 9 16IRX8, Lenovo Flex 7 14IAU7, ThinkBook 13x G2 IAP Laptop, ThinkPad P1 Gen 5 Type (21DC), ThinkPad P1 Gen 5 Type (21DD), ThinkPad X1 Extreme Gen 5 Type (21DE), ThinkPad X1 Extreme Gen 5 Type (21DF), ThinkPad X1 Nano Gen 2 Type (21E8), ThinkPad X1 Nano Gen 2 Type (21E9), IdeaCentre AIO 5 24IAH7, IdeaCentre AIO 5 27IAH7, Flex 5-14ITL05 Laptop (ideapad), Flex 5-15ITL05 Laptop (ideapad), IdeaPad Flex 5 14IRU8, IdeaPad Flex 5 16IRU8, K14 G2 IRU, Lenovo Flex 7 14IRU8, ThinkBook 13s G2 ITL Laptop, ThinkBook 14 G6 IRL, ThinkBook 14s G2 ITL Laptop, Yoga 9-15IMH5 Laptop, ThinkPad L13 Gen 2 Type (20VH), ThinkPad L13 Gen 2 Type (20VJ), ThinkPad L13 Yoga Gen 2 Type (20VL), ThinkPad L13 Yoga Gen 2 Type (20VK), ThinkPad T14s Gen 4 Type (21F6), ThinkPad T14s Gen 4 Type (21F7), ThinkPad S2 Gen 6 Type 20VM China Only, ThinkPad S2 Yoga Gen 6 Type 20VN China Only, ThinkPad X1 Carbon 7th Gen Type (20QD), ThinkPad X1 Carbon 7th Gen Type (20QE), ThinkPad X1 Carbon 7th Gen Type (20R1), ThinkPad X1 Carbon 7th Gen Type (20R2), ThinkPad X1 Carbon 9th Gen Type (20XW), ThinkPad X1 Carbon 9th Gen Type (20XX), ThinkPad X1 Nano Gen 1 Type (20UN), ThinkPad X1 Nano Gen 1 Type (20UQ), ThinkPad X1 Titanium Type (20QA), ThinkPad X1 Titanium Type (20QB), ThinkPad X1 Yoga 4th Gen Type (20QF), ThinkPad X1 Yoga 4th Gen Type (20QG), ThinkPad X1 Yoga 4th Gen Type (20SA), ThinkPad X1 Yoga 4th Gen Type (20SB), ThinkPad X1 Yoga 6th Gen Type (20XY), ThinkPad X1 Yoga 6th Gen Type (20Y0), ThinkPad X13 Yoga Gen 2 Type (20W8), ThinkPad X13 Yoga Gen 2 Type (20W9), ThinkSystem ST50, ThinkSystem ST58

Versions

- (Intel Pentium Gold Series), - (Intel Celeron Processor Family), - (10th Generation Intel Core Processor Family), - (12th Generation Intel Core Processor Family), - (11th Generation Intel Core Processor Family), - (Intel Celeron J6413), - (Intel Celeron N6211), - (Intel Pentium J6425), - (Intel Pentium N6415), - (Intel Atom X6211E), - (Intel Atom X6413E), - (Intel Atom X6425E), - (Intel Atom X6212RE), - (Intel Atom X6414RE), - (Intel Atom X6425RE), - (Intel Atom X6427FE), - (Intel Atom X6200FE), - (Intel Core i7-11700), - (Intel Core i7-11700t), - (Intel Core i5-11400t), - (Intel Core i5-11500), - (Intel Core i5-11500t), - (Intel Core i5-11400), до M2VKT23A (IdeaCentre 3-07IMB05), до M42KT4AA (IdeaCentre 5 14IAB7), до M4UKT3DA (IdeaCentre 5 14IRB8), до M42KT4AA (IdeaCentre Gaming 5 17IAB7), до O5TKT34A (Legion T5 26IRB8), до O5UKT37A (Legion T7 34IRZ8), до M4UKT3DA (LOQ 17IRB8), до M2VKT23A (ThinkCentre M70c), до M3JKT3DA (ThinkCentre M70q Gen 2), до M2RKT58A (ThinkCentre M90a), до M3LKT2BA (ThinkCentre M90a Gen 2), до M4IKT21A (ThinkCentre M90a Gen 3), до M4HKT22A (ThinkCentre M90a Gen 3 Pro), до M3JKT3DA (ThinkCentre M90q Gen 2), до M42KT4AA (ThinkCentre Neo 50t Gen 3), до M36KT33A (Lenovo V50a-22IMB), до M36KT33A (Lenovo V50a-24IMB), до M2VKT23A (Lenovo V50s-07IMB), до M4PKT17A (Lenovo V50t-13IMH), до L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), до L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), до 1.21 (ThinkPad L13 Gen 3 Type (21B3)), до 1.21 (ThinkPad L13 Gen 3 Type (21B4)), до 1.21 (ThinkPad L13 Gen 3 Type (21B5)), до 1.21 (ThinkPad L13 Gen 3 Type (21B6)), до 1.34 (ThinkPad L14 Gen 3 Type (21C1)), до 1.34 (ThinkPad L14 Gen 3 Type (21C2)), до 1.34 (ThinkPad L15 Gen 3 Type (21C3)), до 1.34 (ThinkPad L15 Gen 3 Type (21C4)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), до 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), до M3JKT3DA (ThinkStation P350 Tiny Workstation), до TOE112B (ThinkSystem ST50 V2), до TOE112B (ThinkSystem ST58 V2), до HTCN39WW (IdeaPad 1-14IJL7 Laptop), до HTCN39WW (IdeaPad 1-15IJL7 Laptop), до KUCN33WW (IdeaPad Slim 3 14IAN8), до KUCN33WW (IdeaPad Slim 3 15IAN8), до K1CN45WW (Legion 7 16IAX7), до HTCN39WW (Lenovo V14 G2 IJL), до HTCN39WW (Lenovo V15 G2 IJL Laptop), до KUCN33WW (Lenovo V15 G4 IAN), до O5RKT22A (ThinkCentre Neo 50a 24 Gen 3 Desktop), до O5XKT21A (ThinkCentre Neo 50a 24 Gen 4 Desktop), до L2CN32WW (100w Gen 4 Laptop (Lenovo)), до J7CN46WW (IdeaPad Flex 5 14IAU7 Laptop), до J7CN46WW (IdeaPad Flex 5 16IAU7), до MHCH40WW (Legion 9 16IRX8), до J7CN46WW (Lenovo Flex 7 14IAU7), до HXCN56WW (ThinkBook 13x G2 IAP Laptop), до 1.22 (ThinkPad P1 Gen 5 Type (21DC)), до 1.22 (ThinkPad P1 Gen 5 Type (21DD)), до 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DE)), до 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DF)), до 1.25 (ThinkPad X1 Nano Gen 2 Type (21E8)), до 1.25 (ThinkPad X1 Nano Gen 2 Type (21E9)), до O5RKT22A (IdeaCentre AIO 5 24IAH7), до O5RKT22A (IdeaCentre AIO 5 27IAH7), до M4UKT3DA (ThinkCentre Neo 50a 24 Gen 4 Desktop), до FXCN47WW (Flex 5-14ITL05 Laptop (ideapad)), до FXCN47WW (Flex 5-15ITL05 Laptop (ideapad)), до L6CN23WW (IdeaPad Flex 5 14IRU8), до L6CN23WW (IdeaPad Flex 5 16IRU8), до MMCN34WW (K14 G2 IRU), до L6CN23WW (Lenovo Flex 7 14IRU8), до F9CN59WW (ThinkBook 13s G2 ITL Laptop), до MMCN34WW (ThinkBook 14 G6 IRL), до F9CN59WW (ThinkBook 14s G2 ITL Laptop), до EPCN34WW (Yoga 9-15IMH5 Laptop), до 1.30 (ThinkPad L13 Gen 2 Type (20VH)), до 1.30 (ThinkPad L13 Gen 2 Type (20VJ)), до 1.30 (ThinkPad L13 Yoga Gen 2 Type (20VL)), до 1.30 (ThinkPad L13 Yoga Gen 2 Type (20VK)), до N3PUJ06W (ThinkPad T14s Gen 4 Type (21F6)), до N3PUJ06W (ThinkPad T14s Gen 4 Type (21F7)), до 1.30 (ThinkPad S2 Gen 6 Type 20VM China Only), до 1.30 (ThinkPad S2 Yoga Gen 6 Type 20VN China Only), до 1.48 (ThinkPad X1 Carbon 7th Gen Type (20QD)), до 1.48 (ThinkPad X1 Carbon 7th Gen Type (20QE)), до 1.48 (ThinkPad X1 Carbon 7th Gen Type (20R1)), до 1.48 (ThinkPad X1 Carbon 7th Gen Type (20R2)), до 1.66 (ThinkPad X1 Carbon 9th Gen Type (20XW)), до 1.66 (ThinkPad X1 Carbon 9th Gen Type (20XX)), до 1.60 (ThinkPad X1 Nano Gen 1 Type (20UN)), до 1.60 (ThinkPad X1 Nano Gen 1 Type (20UQ)), до 1.30 (ThinkPad X1 Titanium Type (20QA)), до 1.30 (ThinkPad X1 Titanium Type (20QB)), до 1.48 (ThinkPad X1 Yoga 4th Gen Type (20QF)), до 1.48 (ThinkPad X1 Yoga 4th Gen Type (20QG)), до 1.48 (ThinkPad X1 Yoga 4th Gen Type (20SA)), до 1.48 (ThinkPad X1 Yoga 4th Gen Type (20SB)), до 1.66 (ThinkPad X1 Yoga 6th Gen Type (20XY)), до 1.66 (ThinkPad X1 Yoga 6th Gen Type (20Y0)), до 1.45 (ThinkPad X13 Yoga Gen 2 Type (20W8)), до 1.45 (ThinkPad X13 Yoga Gen 2 Type (20W9)), до ITE133A (ThinkSystem ST50), до ITE133A (ThinkSystem ST58)

Product types

Firmware, Appliance software, Микропрограммный код аппаратных компонентов компьютера

Mitigations

Использование рекомендаций: Для продуктов Lenovo: https://support.lenovo.com/us/en/product_security/LEN-155477 Для продуктов Intel: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:M/C:N/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Intel Corp., Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Intel Pentium Gold Series), - (Intel Celeron Processor Family), - (10th Generation Intel Core Processor Family), - (12th Generation Intel Core Processor Family), - (11th Generation Intel Core Processor Family), - (Intel Celeron J6413), - (Intel Celeron N6211), - (Intel Pentium J6425), - (Intel Pentium N6415), - (Intel Atom X6211E), - (Intel Atom X6413E), - (Intel Atom X6425E), - (Intel Atom X6212RE), - (Intel Atom X6414RE), - (Intel Atom X6425RE), - (Intel Atom X6427FE), - (Intel Atom X6200FE), - (Intel Core i7-11700), - (Intel Core i7-11700t), - (Intel Core i5-11400t), - (Intel Core i5-11500), - (Intel Core i5-11500t), - (Intel Core i5-11400), \u0434\u043e M2VKT23A (IdeaCentre 3-07IMB05), \u0434\u043e M42KT4AA (IdeaCentre 5 14IAB7), \u0434\u043e M4UKT3DA (IdeaCentre 5 14IRB8), \u0434\u043e M42KT4AA (IdeaCentre Gaming 5 17IAB7), \u0434\u043e O5TKT34A (Legion T5 26IRB8), \u0434\u043e O5UKT37A (Legion T7 34IRZ8), \u0434\u043e M4UKT3DA (LOQ 17IRB8), \u0434\u043e M2VKT23A (ThinkCentre M70c), \u0434\u043e M3JKT3DA (ThinkCentre M70q Gen 2), \u0434\u043e M2RKT58A (ThinkCentre M90a), \u0434\u043e M3LKT2BA (ThinkCentre M90a Gen 2), \u0434\u043e M4IKT21A (ThinkCentre M90a Gen 3), \u0434\u043e M4HKT22A (ThinkCentre M90a Gen 3 Pro), \u0434\u043e M3JKT3DA (ThinkCentre M90q Gen 2), \u0434\u043e M42KT4AA (ThinkCentre Neo 50t Gen 3), \u0434\u043e M36KT33A (Lenovo V50a-22IMB), \u0434\u043e M36KT33A (Lenovo V50a-24IMB), \u0434\u043e M2VKT23A (Lenovo V50s-07IMB), \u0434\u043e M4PKT17A (Lenovo V50t-13IMH), \u0434\u043e L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B3)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B4)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B5)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B6)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C1)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C2)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C3)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C4)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), \u0434\u043e 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), \u0434\u043e M3JKT3DA (ThinkStation P350 Tiny Workstation), \u0434\u043e TOE112B (ThinkSystem ST50 V2), \u0434\u043e TOE112B (ThinkSystem ST58 V2), \u0434\u043e HTCN39WW (IdeaPad 1-14IJL7 Laptop), \u0434\u043e HTCN39WW (IdeaPad 1-15IJL7 Laptop), \u0434\u043e KUCN33WW (IdeaPad Slim 3 14IAN8), \u0434\u043e KUCN33WW (IdeaPad Slim 3 15IAN8), \u0434\u043e K1CN45WW (Legion 7 16IAX7), \u0434\u043e HTCN39WW (Lenovo V14 G2 IJL), \u0434\u043e HTCN39WW (Lenovo V15 G2 IJL Laptop), \u0434\u043e KUCN33WW (Lenovo V15 G4 IAN), \u0434\u043e O5RKT22A (ThinkCentre Neo 50a 24 Gen 3 Desktop), \u0434\u043e O5XKT21A (ThinkCentre Neo 50a 24 Gen 4 Desktop), \u0434\u043e L2CN32WW (100w Gen 4 Laptop (Lenovo)), \u0434\u043e J7CN46WW (IdeaPad Flex 5 14IAU7 Laptop), \u0434\u043e J7CN46WW (IdeaPad Flex 5 16IAU7), \u0434\u043e MHCH40WW (Legion 9 16IRX8), \u0434\u043e J7CN46WW (Lenovo Flex 7 14IAU7), \u0434\u043e HXCN56WW (ThinkBook 13x G2 IAP Laptop), \u0434\u043e 1.22 (ThinkPad P1 Gen 5 Type (21DC)), \u0434\u043e 1.22 (ThinkPad P1 Gen 5 Type (21DD)), \u0434\u043e 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DE)), \u0434\u043e 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DF)), \u0434\u043e 1.25 (ThinkPad X1 Nano Gen 2 Type (21E8)), \u0434\u043e 1.25 (ThinkPad X1 Nano Gen 2 Type (21E9)), \u0434\u043e O5RKT22A (IdeaCentre AIO 5 24IAH7), \u0434\u043e O5RKT22A (IdeaCentre AIO 5 27IAH7), \u0434\u043e M4UKT3DA (ThinkCentre Neo 50a 24 Gen 4 Desktop), \u0434\u043e FXCN47WW (Flex 5-14ITL05 Laptop (ideapad)), \u0434\u043e FXCN47WW (Flex 5-15ITL05 Laptop (ideapad)), \u0434\u043e L6CN23WW (IdeaPad Flex 5 14IRU8), \u0434\u043e L6CN23WW (IdeaPad Flex 5 16IRU8), \u0434\u043e MMCN34WW (K14 G2 IRU), \u0434\u043e L6CN23WW (Lenovo Flex 7 14IRU8), \u0434\u043e F9CN59WW (ThinkBook 13s G2 ITL Laptop), \u0434\u043e MMCN34WW (ThinkBook 14 G6 IRL), \u0434\u043e F9CN59WW (ThinkBook 14s G2 ITL Laptop), \u0434\u043e EPCN34WW (Yoga 9-15IMH5 Laptop), \u0434\u043e 1.30 (ThinkPad L13 Gen 2 Type (20VH)), \u0434\u043e 1.30 (ThinkPad L13 Gen 2 Type (20VJ)), \u0434\u043e 1.30 (ThinkPad L13 Yoga Gen 2 Type (20VL)), \u0434\u043e 1.30 (ThinkPad L13 Yoga Gen 2 Type (20VK)), \u0434\u043e N3PUJ06W (ThinkPad T14s Gen 4 Type (21F6)), \u0434\u043e N3PUJ06W (ThinkPad T14s Gen 4 Type (21F7)), \u0434\u043e 1.30 (ThinkPad S2 Gen 6 Type 20VM China Only), \u0434\u043e 1.30 (ThinkPad S2 Yoga Gen 6 Type 20VN China Only), \u0434\u043e 1.48 (ThinkPad X1 Carbon 7th Gen Type (20QD)), \u0434\u043e 1.48 (ThinkPad X1 Carbon 7th Gen Type (20QE)), \u0434\u043e 1.48 (ThinkPad X1 Carbon 7th Gen Type (20R1)), \u0434\u043e 1.48 (ThinkPad X1 Carbon 7th Gen Type (20R2)), \u0434\u043e 1.66 (ThinkPad X1 Carbon 9th Gen Type (20XW)), \u0434\u043e 1.66 (ThinkPad X1 Carbon 9th Gen Type (20XX)), \u0434\u043e 1.60 (ThinkPad X1 Nano Gen 1 Type (20UN)), \u0434\u043e 1.60 (ThinkPad X1 Nano Gen 1 Type (20UQ)), \u0434\u043e 1.30 (ThinkPad X1 Titanium Type (20QA)), \u0434\u043e 1.30 (ThinkPad X1 Titanium Type (20QB)), \u0434\u043e 1.48 (ThinkPad X1 Yoga 4th Gen Type (20QF)), \u0434\u043e 1.48 (ThinkPad X1 Yoga 4th Gen Type (20QG)), \u0434\u043e 1.48 (ThinkPad X1 Yoga 4th Gen Type (20SA)), \u0434\u043e 1.48 (ThinkPad X1 Yoga 4th Gen Type (20SB)), \u0434\u043e 1.66 (ThinkPad X1 Yoga 6th Gen Type (20XY)), \u0434\u043e 1.66 (ThinkPad X1 Yoga 6th Gen Type (20Y0)), \u0434\u043e 1.45 (ThinkPad X13 Yoga Gen 2 Type (20W8)), \u0434\u043e 1.45 (ThinkPad X13 Yoga Gen 2 Type (20W9)), \u0434\u043e ITE133A (ThinkSystem ST50), \u0434\u043e ITE133A (ThinkSystem ST58)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Intel:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "03.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02522",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-32282, INTEL-SA-00929, LEN-155477",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Intel Pentium Gold Series, Intel Celeron Processor Family, 10th Generation Intel Core Processor Family, 12th Generation Intel Core Processor Family, 11th Generation Intel Core Processor Family, Intel Celeron J6413, Intel Celeron N6211, Intel Pentium J6425, Intel Pentium N6415, Intel Atom X6211E, Intel Atom X6413E, Intel Atom X6425E, Intel Atom X6212RE, Intel Atom X6414RE, Intel Atom X6425RE, Intel Atom X6427FE, Intel Atom X6200FE, Intel Core i7-11700, Intel Core i7-11700t, Intel Core i5-11400t, Intel Core i5-11500, Intel Core i5-11500t, Intel Core i5-11400, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 7 16IAX7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, ThinkCentre Neo 50a 24 Gen 3 Desktop, ThinkCentre Neo 50a 24 Gen 4 Desktop, 100w Gen 4 Laptop (Lenovo), IdeaPad Flex 5 14IAU7 Laptop, IdeaPad Flex 5 16IAU7, Legion 9 16IRX8, Lenovo Flex 7 14IAU7, ThinkBook 13x G2 IAP Laptop, ThinkPad P1 Gen 5 Type (21DC), ThinkPad P1 Gen 5 Type (21DD), ThinkPad X1 Extreme Gen 5 Type (21DE), ThinkPad X1 Extreme Gen 5 Type (21DF), ThinkPad X1 Nano Gen 2 Type (21E8), ThinkPad X1 Nano Gen 2 Type (21E9), IdeaCentre AIO 5 24IAH7, IdeaCentre AIO 5 27IAH7, Flex 5-14ITL05 Laptop (ideapad), Flex 5-15ITL05 Laptop (ideapad), IdeaPad Flex 5 14IRU8, IdeaPad Flex 5 16IRU8, K14 G2 IRU, Lenovo Flex 7 14IRU8, ThinkBook 13s G2 ITL Laptop, ThinkBook 14 G6 IRL, ThinkBook 14s G2 ITL Laptop, Yoga 9-15IMH5 Laptop, ThinkPad L13 Gen 2 Type (20VH), ThinkPad L13 Gen 2 Type (20VJ), ThinkPad L13 Yoga Gen 2 Type (20VL), ThinkPad L13 Yoga Gen 2 Type (20VK), ThinkPad T14s Gen 4 Type (21F6), ThinkPad T14s Gen 4 Type (21F7), ThinkPad S2 Gen 6 Type 20VM China Only, ThinkPad S2 Yoga Gen 6 Type 20VN China Only, ThinkPad X1 Carbon 7th Gen Type (20QD), ThinkPad X1 Carbon 7th Gen Type (20QE), ThinkPad X1 Carbon 7th Gen Type (20R1), ThinkPad X1 Carbon 7th Gen Type (20R2), ThinkPad X1 Carbon 9th Gen Type (20XW), ThinkPad X1 Carbon 9th Gen Type (20XX), ThinkPad X1 Nano Gen 1 Type (20UN), ThinkPad X1 Nano Gen 1 Type (20UQ), ThinkPad X1 Titanium Type (20QA), ThinkPad X1 Titanium Type (20QB), ThinkPad X1 Yoga 4th Gen Type (20QF), ThinkPad X1 Yoga 4th Gen Type (20QG), ThinkPad X1 Yoga 4th Gen Type (20SA), ThinkPad X1 Yoga 4th Gen Type (20SB), ThinkPad X1 Yoga 6th Gen Type (20XY), ThinkPad X1 Yoga 6th Gen Type (20Y0), ThinkPad X13 Yoga Gen 2 Type (20W8), ThinkPad X13 Yoga Gen 2 Type (20W9), ThinkSystem ST50, ThinkSystem ST58",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438 Time-of-check Time-of-use (TOCTOU) (CWE-367)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-155477\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-367",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,3)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)"
}

BDU:2024-02524 (CVE-2023-38575)

Vulnerability from fstec – Published: 2024-04-03 – Updated: 2025-11-19 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения процессоров Intel, связанная с раскрытием информации через несоответствие, позволяющая нарушителю раскрыть защищаемую информацию

Summary

Уязвимость микропрограммного обеспечения процессоров Intel связана с раскрытием информации через несоответствие. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию

Severity

4.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:N/A:N

5.5 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Information gathering

Incidents

Being clarified

Remediation

Software update

CWE

CWE-1303 - Нетранспарентный совместное использование микроархитектурных ресурсов

Aliases

CVE-2023-38575, INTEL-SA-00982, LEN-155477

References

8 references

URL
https://support.lenovo.com/us/en/product_security/LEN-155477
https://www.intel.com/content/www/us/en/developer/topic-technology/software-sec…
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.11/
http://repo.red-soft.ru/redos/7.3c/x86_64/updates/
https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17
https://abf.rosa.ru/advisories/ROSA-SA-2025-2811
https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru

Impacted products

101 products from 7 vendors

Vendors

Intel Corp., ООО «Ред Софт», ООО «РусБИТех-Астра», Lenovo Group Limited, АО «НППКТ», АО «НТЦ ИТ РОСА», ООО «НЦПР»

Products

Intel Celeron, Intel Xeon E Series, Intel Pentium Gold Series, Intel Xeon W Processor, РЕД ОС (запись в едином реестре российских программ №3751), Astra Linux Special Edition (запись в едином реестре российских программ №369), 12th Generation Intel Core Processor Family, 13th Generation Intel Core Processor Family, 4th Generation Intel Xeon Scalable processors, 4th Generation Intel Xeon Platinum processors, 4th Generation Intel Xeon Gold Processors, 4th Generation Intel Xeon Silver Processor, 4th Generation Intel Xeon Bronze Processor, 4th Gen Intel Xeon Scalable Processors with Intel vRAN, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, ThinkCentre Neo 50t Gen 4, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AW), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, 14th Generation Intel Core Processor Family, P7 Intel Workstation (ThinkStation), Legion 7 16IAX7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Yoga Slim 7 ProX 14IAH7, ThinkCentre Neo 50a 24 Gen 3 Desktop, ThinkCentre Neo 50a 24 Gen 4 Desktop, 100w Gen 4 Laptop (Lenovo), IdeaPad 5 14IAL7, IdeaPad 5 Pro 16IAH7, IdeaPad Duet 5 12IAU7, IdeaPad Duet 5 12IRU8, IdeaPad Flex 5 14IAU7 Laptop, IdeaPad Flex 5 16IAU7, IdeaPad Gaming 3 15IAH7 Laptop, IdeaPad Gaming 3 16IAH7, IdeaPad Pro 5 14IRH8, Legion 9 16IRX8, Lenovo Flex 7 14IAU7, Lenovo Slim 7 14IRP8, Slim 7 16IAH7 Laptop, ThinkBook 13s G4 IAP, ThinkBook 13x G2 IAP Laptop, ThinkBook 14 G4+ IAP Laptop, ThinkBook 16 G4+ IAP Laptop, Yoga 7 14IRL8, Yoga 7 16IRL8, Yoga Book 9 13IRU8, Yoga Pro 7 14IRH8, Yoga Slim 6 14IAP8, Yoga Slim 6 14IRP8, Yoga Slim 7 Pro 16IAH7 Laptop, Yoga Slim 9 14IAP7, ThinkPad P1 Gen 5 Type (21DC), ThinkPad P1 Gen 5 Type (21DD), ThinkPad X1 Extreme Gen 5 Type (21DE), ThinkPad X1 Extreme Gen 5 Type (21DF), ThinkPad X1 Nano Gen 2 Type (21E8), ThinkPad X1 Nano Gen 2 Type (21E9), 5th Generation Intel Xeon Scalable processors, Intel Pentium Processor G7400, Intel Pentium Processor G7400T, IdeaCentre AIO 5 24IAH7, IdeaCentre AIO 5 27IAH7, ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), ROSA Virtualization 3.0 (запись в едином реестре российских программ №21308), МСВСфера

Versions

- (Intel Celeron), - (Intel Xeon E Series), - (Intel Pentium Gold Series), - (Intel Xeon W Processor), 7.3 (РЕД ОС), 1.7 (Astra Linux Special Edition), - (12th Generation Intel Core Processor Family), - (13th Generation Intel Core Processor Family), - (4th Generation Intel Xeon Scalable processors), - (4th Generation Intel Xeon Platinum processors), - (4th Generation Intel Xeon Gold Processors), - (4th Generation Intel Xeon Silver Processor), - (4th Generation Intel Xeon Bronze Processor), - (4th Gen Intel Xeon Scalable Processors with Intel vRAN), до M2VKT23A (IdeaCentre 3-07IMB05), до M42KT4AA (IdeaCentre 5 14IAB7), до M4UKT3DA (IdeaCentre 5 14IRB8), до M42KT4AA (IdeaCentre Gaming 5 17IAB7), до O5TKT34A (Legion T5 26IRB8), до O5UKT37A (Legion T7 34IRZ8), до M4UKT3DA (LOQ 17IRB8), до M2VKT23A (ThinkCentre M70c), до M3JKT3DA (ThinkCentre M70q Gen 2), до M2RKT58A (ThinkCentre M90a), до M3LKT2BA (ThinkCentre M90a Gen 2), до M4IKT21A (ThinkCentre M90a Gen 3), до M4HKT22A (ThinkCentre M90a Gen 3 Pro), до M3JKT3DA (ThinkCentre M90q Gen 2), до M42KT4AA (ThinkCentre Neo 50t Gen 3), до M4UKT3DA (ThinkCentre Neo 50t Gen 4), до M36KT33A (Lenovo V50a-22IMB), до M36KT33A (Lenovo V50a-24IMB), до M2VKT23A (Lenovo V50s-07IMB), до M4PKT17A (Lenovo V50t-13IMH), до L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), до L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), до 1.21 (ThinkPad L13 Gen 3 Type (21B3)), до 1.21 (ThinkPad L13 Gen 3 Type (21B4)), до 1.21 (ThinkPad L13 Gen 3 Type (21B5)), до 1.21 (ThinkPad L13 Gen 3 Type (21B6)), до 1.34 (ThinkPad L14 Gen 3 Type (21C1)), до 1.34 (ThinkPad L14 Gen 3 Type (21C2)), до 1.34 (ThinkPad L15 Gen 3 Type (21C3)), до 1.34 (ThinkPad L15 Gen 3 Type (21C4)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), до 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AW)), до 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), до M3JKT3DA (ThinkStation P350 Tiny Workstation), до TOE112B (ThinkSystem ST50 V2), до TOE112B (ThinkSystem ST58 V2), - (14th Generation Intel Core Processor Family), до S0DKT16A (P7 Intel Workstation (ThinkStation)), до K1CN45WW (Legion 7 16IAX7), до HMCN48WW (Lenovo Slim 7 ProX 14IAH7), до J3CN55WW (Lenovo Slim 9 14IAP7), до HMCN48WW (Yoga Slim 7 ProX 14IAH7), до O5RKT22A (ThinkCentre Neo 50a 24 Gen 3 Desktop), до O5XKT21A (ThinkCentre Neo 50a 24 Gen 4 Desktop), до L2CN32WW (100w Gen 4 Laptop (Lenovo)), до JLCN37WW (IdeaPad 5 14IAL7), до J5CN34WW (IdeaPad 5 Pro 16IAH7), до JXCN48WW (IdeaPad Duet 5 12IAU7), до M7CN20WW (IdeaPad Duet 5 12IRU8), до J7CN46WW (IdeaPad Flex 5 14IAU7 Laptop), до J7CN46WW (IdeaPad Flex 5 16IAU7), до JMCN45WW (IdeaPad Gaming 3 15IAH7 Laptop), до JMCN45WW (IdeaPad Gaming 3 16IAH7), до LJCN29WW (IdeaPad Pro 5 14IRH8), до MHCH40WW (Legion 9 16IRX8), до J7CN46WW (Lenovo Flex 7 14IAU7), до LGCN28WW (Lenovo Slim 7 14IRP8), до KMCN20WW (Slim 7 16IAH7 Laptop), до HWCN51WW (ThinkBook 13s G4 IAP), до HXCN56WW (ThinkBook 13x G2 IAP Laptop), до HYCN48WW (ThinkBook 14 G4+ IAP Laptop), до HYCN48WW (ThinkBook 16 G4+ IAP Laptop), до LHCN22WW (Yoga 7 14IRL8), до LHCN22WW (Yoga 7 16IRL8), до KXCN36WW (Yoga Book 9 13IRU8), до LWCN26WW (Yoga Pro 7 14IRH8), до KTCN41WW (Yoga Slim 6 14IAP8), до LGCN28WW (Yoga Slim 6 14IRP8), до KMCN20WW (Yoga Slim 7 Pro 16IAH7 Laptop), до J3CN55WW (Yoga Slim 9 14IAP7), до 1.22 (ThinkPad P1 Gen 5 Type (21DC)), до 1.22 (ThinkPad P1 Gen 5 Type (21DD)), до 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DE)), до 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DF)), до 1.25 (ThinkPad X1 Nano Gen 2 Type (21E8)), до 1.25 (ThinkPad X1 Nano Gen 2 Type (21E9)), - (5th Generation Intel Xeon Scalable processors), - (Intel Pentium Processor G7400), - (Intel Pentium Processor G7400T), до O5RKT22A (IdeaCentre AIO 5 24IAH7), до O5RKT22A (IdeaCentre AIO 5 27IAH7), до 2.11 (ОСОН ОСнова Оnyx), 3.0 (ROSA Virtualization 3.0), 9.5 (МСВСфера)

Product types

Appliance software, Firmware, Operating system, Virtualization software

Platforms

ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751), ООО «РусБИТех-Астра» Astra Linux Special Edition 1.7 (запись в едином реестре российских программ №369), АО «НППКТ» ОСОН ОСнова Оnyx до 2.11 (запись в едином реестре российских программ №5913), АО «НТЦ ИТ РОСА» ROSA Virtualization 3.0 3.0 (запись в едином реестре российских программ №21308), ООО «НЦПР» МСВСфера 9.5

Mitigations

Использование рекомендаций: Для продуктов Lenovo: https://support.lenovo.com/us/en/product_security/LEN-155477 Для продуктов Intel: https://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html Для ОСОН ОСнова Оnyx (2.11): Обновление программного обеспечения intel-microcode до версии 3.20240312.1~deb10u1 Для РедОС: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ Для ОС Astra Linux: обновить пакет intel-microcode до 3.20240813.1~deb12u1+ci202409161120+astra3 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 Для программной системы управления средой виртуализации с подсистемой безагентного резервного копирования виртуальных машин «ROSA Virtualization 3.0»: https://abf.rosa.ru/advisories/ROSA-SA-2025-2811 Для МСВСфера: https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Intel Corp., \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Lenovo Group Limited, \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb, \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb, \u041e\u041e\u041e \u00ab\u041d\u0426\u041f\u0420\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Intel Celeron), - (Intel Xeon E Series), - (Intel Pentium Gold Series), - (Intel Xeon W Processor), 7.3 (\u0420\u0415\u0414 \u041e\u0421), 1.7 (Astra Linux Special Edition), - (12th Generation Intel Core Processor Family), - (13th Generation Intel Core Processor Family), - (4th Generation Intel Xeon Scalable processors), - (4th Generation Intel Xeon Platinum processors), - (4th Generation Intel Xeon Gold Processors), - (4th Generation Intel Xeon Silver Processor), - (4th Generation Intel Xeon Bronze Processor), - (4th Gen Intel Xeon Scalable Processors with Intel vRAN), \u0434\u043e M2VKT23A (IdeaCentre 3-07IMB05), \u0434\u043e M42KT4AA (IdeaCentre 5 14IAB7), \u0434\u043e M4UKT3DA (IdeaCentre 5 14IRB8), \u0434\u043e M42KT4AA (IdeaCentre Gaming 5 17IAB7), \u0434\u043e O5TKT34A (Legion T5 26IRB8), \u0434\u043e O5UKT37A (Legion T7 34IRZ8), \u0434\u043e M4UKT3DA (LOQ 17IRB8), \u0434\u043e M2VKT23A (ThinkCentre M70c), \u0434\u043e M3JKT3DA (ThinkCentre M70q Gen 2), \u0434\u043e M2RKT58A (ThinkCentre M90a), \u0434\u043e M3LKT2BA (ThinkCentre M90a Gen 2), \u0434\u043e M4IKT21A (ThinkCentre M90a Gen 3), \u0434\u043e M4HKT22A (ThinkCentre M90a Gen 3 Pro), \u0434\u043e M3JKT3DA (ThinkCentre M90q Gen 2), \u0434\u043e M42KT4AA (ThinkCentre Neo 50t Gen 3), \u0434\u043e M4UKT3DA (ThinkCentre Neo 50t Gen 4), \u0434\u043e M36KT33A (Lenovo V50a-22IMB), \u0434\u043e M36KT33A (Lenovo V50a-24IMB), \u0434\u043e M2VKT23A (Lenovo V50s-07IMB), \u0434\u043e M4PKT17A (Lenovo V50t-13IMH), \u0434\u043e L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B3)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B4)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B5)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B6)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C1)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C2)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C3)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C4)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), \u0434\u043e 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AW)), \u0434\u043e 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), \u0434\u043e M3JKT3DA (ThinkStation P350 Tiny Workstation), \u0434\u043e TOE112B (ThinkSystem ST50 V2), \u0434\u043e TOE112B (ThinkSystem ST58 V2), - (14th Generation Intel Core Processor Family), \u0434\u043e S0DKT16A (P7 Intel Workstation (ThinkStation)), \u0434\u043e K1CN45WW (Legion 7 16IAX7), \u0434\u043e HMCN48WW (Lenovo Slim 7 ProX 14IAH7), \u0434\u043e J3CN55WW (Lenovo Slim 9 14IAP7), \u0434\u043e HMCN48WW (Yoga Slim 7 ProX 14IAH7), \u0434\u043e O5RKT22A (ThinkCentre Neo 50a 24 Gen 3 Desktop), \u0434\u043e O5XKT21A (ThinkCentre Neo 50a 24 Gen 4 Desktop), \u0434\u043e L2CN32WW (100w Gen 4 Laptop (Lenovo)), \u0434\u043e JLCN37WW (IdeaPad 5 14IAL7), \u0434\u043e J5CN34WW (IdeaPad 5 Pro 16IAH7), \u0434\u043e JXCN48WW (IdeaPad Duet 5 12IAU7), \u0434\u043e M7CN20WW (IdeaPad Duet 5 12IRU8), \u0434\u043e J7CN46WW (IdeaPad Flex 5 14IAU7 Laptop), \u0434\u043e J7CN46WW (IdeaPad Flex 5 16IAU7), \u0434\u043e JMCN45WW (IdeaPad Gaming 3 15IAH7 Laptop), \u0434\u043e JMCN45WW (IdeaPad Gaming 3 16IAH7), \u0434\u043e LJCN29WW (IdeaPad Pro 5 14IRH8), \u0434\u043e MHCH40WW (Legion 9 16IRX8), \u0434\u043e J7CN46WW (Lenovo Flex 7 14IAU7), \u0434\u043e LGCN28WW (Lenovo Slim 7 14IRP8), \u0434\u043e KMCN20WW (Slim 7 16IAH7 Laptop), \u0434\u043e HWCN51WW (ThinkBook 13s G4 IAP), \u0434\u043e HXCN56WW (ThinkBook 13x G2 IAP Laptop), \u0434\u043e HYCN48WW (ThinkBook 14 G4+ IAP Laptop), \u0434\u043e HYCN48WW (ThinkBook 16 G4+ IAP Laptop), \u0434\u043e LHCN22WW (Yoga 7 14IRL8), \u0434\u043e LHCN22WW (Yoga 7 16IRL8), \u0434\u043e KXCN36WW (Yoga Book 9 13IRU8), \u0434\u043e LWCN26WW (Yoga Pro 7 14IRH8), \u0434\u043e KTCN41WW (Yoga Slim 6 14IAP8), \u0434\u043e LGCN28WW (Yoga Slim 6 14IRP8), \u0434\u043e KMCN20WW (Yoga Slim 7 Pro 16IAH7 Laptop), \u0434\u043e J3CN55WW (Yoga Slim 9 14IAP7), \u0434\u043e 1.22 (ThinkPad P1 Gen 5 Type (21DC)), \u0434\u043e 1.22 (ThinkPad P1 Gen 5 Type (21DD)), \u0434\u043e 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DE)), \u0434\u043e 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DF)), \u0434\u043e 1.25 (ThinkPad X1 Nano Gen 2 Type (21E8)), \u0434\u043e 1.25 (ThinkPad X1 Nano Gen 2 Type (21E9)), - (5th Generation Intel Xeon Scalable processors), - (Intel Pentium Processor G7400), - (Intel Pentium Processor G7400T), \u0434\u043e O5RKT22A (IdeaCentre AIO 5 24IAH7), \u0434\u043e O5RKT22A (IdeaCentre AIO 5 27IAH7), \u0434\u043e 2.11 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), 3.0 (ROSA Virtualization 3.0), 9.5 (\u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Intel:\nhttps://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (2.11):\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f intel-microcode \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.20240312.1~deb10u1\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 intel-microcode \u0434\u043e 3.20240813.1~deb12u1+ci202409161120+astra3 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u0430\u0433\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u00abROSA Virtualization 3.0\u00bb: https://abf.rosa.ru/advisories/ROSA-SA-2025-2811\n\n\u0414\u043b\u044f \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430: https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "19.11.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02524",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-38575, INTEL-SA-00982, LEN-155477",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Intel Celeron, Intel Xeon E Series, Intel Pentium Gold Series, Intel Xeon W Processor, \u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), 12th Generation Intel Core Processor Family, 13th Generation Intel Core Processor Family, 4th Generation Intel Xeon Scalable processors, 4th Generation Intel Xeon Platinum processors, 4th Generation Intel Xeon Gold Processors, 4th Generation Intel Xeon Silver Processor, 4th Generation Intel Xeon Bronze Processor, 4th Gen Intel Xeon Scalable Processors with Intel vRAN, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, ThinkCentre Neo 50t Gen 4, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AW), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, 14th Generation Intel Core Processor Family, P7 Intel Workstation (ThinkStation), Legion 7 16IAX7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Yoga Slim 7 ProX 14IAH7, ThinkCentre Neo 50a 24 Gen 3 Desktop, ThinkCentre Neo 50a 24 Gen 4 Desktop, 100w Gen 4 Laptop (Lenovo), IdeaPad 5 14IAL7, IdeaPad 5 Pro 16IAH7, IdeaPad Duet 5 12IAU7, IdeaPad Duet 5 12IRU8, IdeaPad Flex 5 14IAU7 Laptop, IdeaPad Flex 5 16IAU7, IdeaPad Gaming 3 15IAH7 Laptop, IdeaPad Gaming 3 16IAH7, IdeaPad Pro 5 14IRH8, Legion 9 16IRX8, Lenovo Flex 7 14IAU7, Lenovo Slim 7 14IRP8, Slim 7 16IAH7 Laptop, ThinkBook 13s G4 IAP, ThinkBook 13x G2 IAP Laptop, ThinkBook 14 G4+ IAP Laptop, ThinkBook 16 G4+ IAP Laptop, Yoga 7 14IRL8, Yoga 7 16IRL8, Yoga Book 9 13IRU8, Yoga Pro 7 14IRH8, Yoga Slim 6 14IAP8, Yoga Slim 6 14IRP8, Yoga Slim 7 Pro 16IAH7 Laptop, Yoga Slim 9 14IAP7, ThinkPad P1 Gen 5 Type (21DC), ThinkPad P1 Gen 5 Type (21DD), ThinkPad X1 Extreme Gen 5 Type (21DE), ThinkPad X1 Extreme Gen 5 Type (21DF), ThinkPad X1 Nano Gen 2 Type (21E8), ThinkPad X1 Nano Gen 2 Type (21E9), 5th Generation Intel Xeon Scalable processors, Intel Pentium Processor G7400, Intel Pentium Processor G7400T, IdeaCentre AIO 5 24IAH7, IdeaCentre AIO 5 27IAH7, \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), ROSA Virtualization 3.0 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211621308), \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.11  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb ROSA Virtualization 3.0 3.0  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211621308), \u041e\u041e\u041e \u00ab\u041d\u0426\u041f\u0420\u00bb \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430 9.5 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0442\u0440\u0430\u043d\u0441\u043f\u0430\u0440\u0435\u043d\u0442\u043d\u044b\u0439 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 (CWE-1303)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435\u043c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u043d\u0435\u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0438\u0435. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044c \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0431\u043e\u0440 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-155477\nhttps://www.intel.com/content/www/us/en/developer/topic-technology/software-security-guidance/processors-affected-consolidated-product-cpu-model.html\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00982.html\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.11/\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\nhttps://abf.rosa.ru/advisories/ROSA-SA-2025-2811\nhttps://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-1303",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}

BDU:2024-02525 (CVE-2023-5912)

Vulnerability from fstec – Published: 2024-04-03 – Updated: 2024-06-05 – View on bdu.fstec.ru Fixed

Title

Уязвимость реализации режима управления системой System Management Mode (SMM) микропрограммного обеспечения ноутбуков Lenovo, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код

Summary

Уязвимость реализации режима управления системой System Management Mode (SMM) микропрограммного обеспечения ноутбуков Lenovo связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии и выполнить произвольный код

Severity

4.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:S/C:C/I:N/A:N

5.5 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2023-5912, LEN-155477

References

1 reference

URL
https://support.lenovo.com/us/en/product_security/LEN-155477

Impacted products

37 products from 1 vendor

Vendors

Lenovo Group Limited

Products

IdeaPad 1-14IGL07 Laptop, IdeaPad 1-15IGL07 Laptop, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Pro 5 16ARP8, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 5 15ARH7 Laptop (Lenovo), Legion 5 15ARH7H Laptop (Lenovo), Legion 5 Pro 16ARH7 Laptop (Lenovo), Legion 5 Pro 16ARH7H Laptop (Lenovo), Legion 5 Pro-16ACH6, Legion 5 Pro-16ACH6H, Legion 5-15ACH6, Legion 5-15ACH6A, Legion 5-15ACH6H, Legion 5-17ACH6, Legion 5-17ACH6H, Legion 7 16ARHA7, Legion 7 16IAX7, Legion 7-16ACHg6, Legion Pro 5 16ARX8, Legion S7 16ARHA7, Lenovo Slim 7 14ARH7, Lenovo Slim 7 ProX 14ARH7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, S540-13ARE Laptop, ThinkBook 14p G3 ARH, ThinkBook 16p G3 ARH, Yoga 7 14ARB7, Yoga Slim 7 Pro 14ARH7, Yoga Slim 7 ProX 14ARH7, Yoga Slim 7 ProX 14IAH7

Versions

до KKCN21WW (IdeaPad 1-14IGL07 Laptop), до KKCN21WW (IdeaPad 1-15IGL07 Laptop), до HTCN39WW (IdeaPad 1-14IJL7 Laptop), до HTCN39WW (IdeaPad 1-15IJL7 Laptop), до L0CN28WW (IdeaPad Pro 5 16ARP8), до KUCN33WW (IdeaPad Slim 3 14IAN8), до KUCN33WW (IdeaPad Slim 3 15IAN8), до JUCN63WW (Legion 5 15ARH7 Laptop (Lenovo)), до JUCN63WW (Legion 5 15ARH7H Laptop (Lenovo)), до JUCN63WW (Legion 5 Pro 16ARH7 Laptop (Lenovo)), до JUCN63WW (Legion 5 Pro 16ARH7H Laptop (Lenovo)), до HHCN36WW (Legion 5 Pro-16ACH6), до GKCN64WW (Legion 5 Pro-16ACH6H), до HHCN36WW (Legion 5-15ACH6), до G9CN36WW (Legion 5-15ACH6A), до GKCN64WW (Legion 5-15ACH6H), до HHCN36WW (Legion 5-17ACH6), до GKCN64WW (Legion 5-17ACH6H), до K9CN44WW (Legion 7 16ARHA7), до K1CN45WW (Legion 7 16IAX7), до GKCN64WW (Legion 7-16ACHg6), до LPCN47WW (Legion Pro 5 16ARX8), до KFCN38WW (Legion S7 16ARHA7), до KHCN31WW (Lenovo Slim 7 14ARH7), до JVCN38WW (Lenovo Slim 7 ProX 14ARH7), до HMCN48WW (Lenovo Slim 7 ProX 14IAH7), до J3CN55WW (Lenovo Slim 9 14IAP7), до HTCN39WW (Lenovo V14 G2 IJL), до HTCN39WW (Lenovo V15 G2 IJL Laptop), до KUCN33WW (Lenovo V15 G4 IAN), до F0CN41WW (S540-13ARE Laptop), до K4CN36WW (ThinkBook 14p G3 ARH), до KCCN39WW (ThinkBook 16p G3 ARH), до K5CN42WW (Yoga 7 14ARB7), до KHCN31WW (Yoga Slim 7 Pro 14ARH7), до JVCN38WW (Yoga Slim 7 ProX 14ARH7), до HMCN48WW (Yoga Slim 7 ProX 14IAH7)

Product types

Firmware

Mitigations

Использование рекомендаций производителя: https://support.lenovo.com/us/en/product_security/LEN-155477

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:S/C:C/I:N/A:N",
  "CVSS 3.0": "AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e KKCN21WW (IdeaPad 1-14IGL07 Laptop), \u0434\u043e KKCN21WW (IdeaPad 1-15IGL07 Laptop), \u0434\u043e HTCN39WW (IdeaPad 1-14IJL7 Laptop), \u0434\u043e HTCN39WW (IdeaPad 1-15IJL7 Laptop), \u0434\u043e L0CN28WW (IdeaPad Pro 5 16ARP8), \u0434\u043e KUCN33WW (IdeaPad Slim 3 14IAN8), \u0434\u043e KUCN33WW (IdeaPad Slim 3 15IAN8), \u0434\u043e JUCN63WW (Legion 5 15ARH7 Laptop (Lenovo)), \u0434\u043e JUCN63WW (Legion 5 15ARH7H Laptop (Lenovo)), \u0434\u043e JUCN63WW (Legion 5 Pro 16ARH7 Laptop (Lenovo)), \u0434\u043e JUCN63WW (Legion 5 Pro 16ARH7H Laptop (Lenovo)), \u0434\u043e HHCN36WW (Legion 5 Pro-16ACH6), \u0434\u043e GKCN64WW (Legion 5 Pro-16ACH6H), \u0434\u043e HHCN36WW (Legion 5-15ACH6), \u0434\u043e G9CN36WW (Legion 5-15ACH6A), \u0434\u043e GKCN64WW (Legion 5-15ACH6H), \u0434\u043e HHCN36WW (Legion 5-17ACH6), \u0434\u043e GKCN64WW (Legion 5-17ACH6H), \u0434\u043e K9CN44WW (Legion 7 16ARHA7), \u0434\u043e K1CN45WW (Legion 7 16IAX7), \u0434\u043e GKCN64WW (Legion 7-16ACHg6), \u0434\u043e LPCN47WW (Legion Pro 5 16ARX8), \u0434\u043e KFCN38WW (Legion S7 16ARHA7), \u0434\u043e KHCN31WW (Lenovo Slim 7 14ARH7), \u0434\u043e JVCN38WW (Lenovo Slim 7 ProX 14ARH7), \u0434\u043e HMCN48WW (Lenovo Slim 7 ProX 14IAH7), \u0434\u043e J3CN55WW (Lenovo Slim 9 14IAP7), \u0434\u043e HTCN39WW (Lenovo V14 G2 IJL), \u0434\u043e HTCN39WW (Lenovo V15 G2 IJL Laptop), \u0434\u043e KUCN33WW (Lenovo V15 G4 IAN), \u0434\u043e F0CN41WW (S540-13ARE Laptop), \u0434\u043e K4CN36WW (ThinkBook 14p G3 ARH), \u0434\u043e KCCN39WW (ThinkBook 16p G3 ARH), \u0434\u043e K5CN42WW (Yoga 7 14ARB7), \u0434\u043e KHCN31WW (Yoga Slim 7 Pro 14ARH7), \u0434\u043e JVCN38WW (Yoga Slim 7 ProX 14ARH7), \u0434\u043e HMCN48WW (Yoga Slim 7 ProX 14IAH7)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "05.06.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02525",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-5912, LEN-155477",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "IdeaPad 1-14IGL07 Laptop, IdeaPad 1-15IGL07 Laptop, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Pro 5 16ARP8, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 5 15ARH7 Laptop (Lenovo), Legion 5 15ARH7H Laptop (Lenovo), Legion 5 Pro 16ARH7 Laptop (Lenovo), Legion 5 Pro 16ARH7H Laptop (Lenovo), Legion 5 Pro-16ACH6, Legion 5 Pro-16ACH6H, Legion 5-15ACH6, Legion 5-15ACH6A, Legion 5-15ACH6H, Legion 5-17ACH6, Legion 5-17ACH6H, Legion 7 16ARHA7, Legion 7 16IAX7, Legion 7-16ACHg6, Legion Pro 5 16ARX8, Legion S7 16ARHA7, Lenovo Slim 7 14ARH7, Lenovo Slim 7 ProX 14ARH7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, S540-13ARE Laptop, ThinkBook 14p G3 ARH, ThinkBook 16p G3 ARH, Yoga 7 14ARB7, Yoga Slim 7 Pro 14ARH7, Yoga Slim 7 ProX 14ARH7, Yoga Slim 7 ProX 14IAH7",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,6)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,5)"
}

BDU:2024-02526 (CVE-2023-32666)

Vulnerability from fstec – Published: 2024-04-03 – Updated: 2024-04-03 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения процессоров Intel, связанная с недостатками контроля доступа, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость микропрограммного обеспечения процессоров Intel связана с недостатками контроля доступа. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

5.3 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:M/C:C/I:C/A:N

7.2 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Authorization bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-1191 - Встроенный интерфейс отладки и тестирования с неправильным контролем доступа

Aliases

CVE-2023-32666, INTEL-SA-00986, LEN-155477

References

2 references

URL
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00986.html
https://support.lenovo.com/us/en/product_security/LEN-155477

Impacted products

6 products from 2 vendors

Vendors

Intel Corp., Lenovo Group Limited

Products

4th Generation Intel Xeon Scalable processors, 4th Generation Intel Xeon Platinum processors, 4th Generation Intel Xeon Gold Processors, 4th Generation Intel Xeon Silver Processor, 4th Generation Intel Xeon Bronze Processor, P7 Intel Workstation (ThinkStation)

Versions

- (4th Generation Intel Xeon Scalable processors), - (4th Generation Intel Xeon Platinum processors), - (4th Generation Intel Xeon Gold Processors), - (4th Generation Intel Xeon Silver Processor), - (4th Generation Intel Xeon Bronze Processor), до S0DKT16A (P7 Intel Workstation (ThinkStation))

Product types

Firmware

Mitigations

Использование рекомендаций: Для продуктов Intel: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00986.html Для продуктов Lenovo: https://support.lenovo.com/us/en/product_security/LEN-155477

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:M/C:C/I:C/A:N",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Intel Corp., Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (4th Generation Intel Xeon Scalable processors), - (4th Generation Intel Xeon Platinum processors), - (4th Generation Intel Xeon Gold Processors), - (4th Generation Intel Xeon Silver Processor), - (4th Generation Intel Xeon Bronze Processor), \u0434\u043e S0DKT16A (P7 Intel Workstation (ThinkStation))",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Intel:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00986.html\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "03.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02526",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-32666, INTEL-SA-00986, LEN-155477",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "4th Generation Intel Xeon Scalable processors, 4th Generation Intel Xeon Platinum processors, 4th Generation Intel Xeon Gold Processors, 4th Generation Intel Xeon Silver Processor, 4th Generation Intel Xeon Bronze Processor, P7 Intel Workstation (ThinkStation)",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043e\u0442\u043b\u0430\u0434\u043a\u0438 \u0438 \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (CWE-1191)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u043c\u0438 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00986.html\nhttps://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-1191",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,3)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)"
}

BDU:2024-02527 (CVE-2023-22655)

Vulnerability from fstec – Published: 2024-04-03 – Updated: 2025-11-19 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения процессоров Intel, связанная с нарушением механизма защиты данных, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость микропрограммного обеспечения процессоров Intel связана с нарушением механизма защиты данных. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

4.4 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:M/C:P/I:C/A:N

6.1 (Medium) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-693 - Нарушение механизма защиты данных

Aliases

CVE-2023-22655, INTEL-SA-00960, LEN-155477

References

7 references

URL
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html
https://support.lenovo.com/us/en/product_security/LEN-155477
https://поддержка.нппкт.рф/bin/view/ОСнова/Обновления/2.11/
http://repo.red-soft.ru/redos/7.3c/x86_64/updates/
https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17
https://abf.rosa.ru/advisories/ROSA-SA-2025-2811
https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru

Impacted products

61 products from 7 vendors

Vendors

Intel Corp., ООО «Ред Софт», ООО «РусБИТех-Астра», Lenovo Group Limited, АО «НППКТ», АО «НТЦ ИТ РОСА», ООО «НЦПР»

Products

Intel Xeon D, РЕД ОС (запись в едином реестре российских программ №3751), Astra Linux Special Edition (запись в едином реестре российских программ №369), 3rd Generation Intel Xeon Scalable Processors, 4th Generation Intel Xeon Scalable processors, 4th Generation Intel Xeon Platinum processors, 4th Generation Intel Xeon Gold Processors, 4th Generation Intel Xeon Silver Processor, 4th Generation Intel Xeon Bronze Processor, 4th Gen Intel Xeon Scalable Processors with Intel vRAN, HX5530 Appliance (ThinkAgile), VX3331 Certified Node (ThinkAgile), HX1331 Certified Node (ThinkAgile), HX2330 Appliance (ThinkAgile), HX2331 Certified Node (ThinkAgile), HX3330 Appliance (ThinkAgile), HX3331 Certified Node (ThinkAgile), HX3331 Node SAP HANA (ThinkAgile), HX5531 Certified Node (ThinkAgile), HX7530 Appl for SAP HANA (ThinkAgile), HX7531 Certified Node (ThinkAgile), HX7531 Node SAP HANA (ThinkAgile), MX3330-F All-flash Appliance (ThinkAgile), MX3330-H Hybrid Appliance (ThinkAgile), MX3331-F All-flash Certified node (ThinkAgile), MX3331-H Hybrid Certified node (ThinkAgile), MX3530 F All flash Appliance (ThinkAgile), MX3530-H Hybrid Appliance (ThinkAgile), MX3531 H Hybrid Certified node (ThinkAgile), MX3531-F All-flash Certified node (ThinkAgile), VX2330 Appliance (ThinkAgile), VX3330 Appliance (ThinkAgile), VX3530-G Appliance (ThinkAgile), VX5530 Appliance (ThinkAgile), VX7530 Appliance (ThinkAgile), VX7531 Certified Node (ThinkAgile), VX7330 Appliance (Thinkagile), SE350 V2 (ThinkEdge), SE360 V2 (ThinkEdge), DN8836 (ThinkServer), DN8848 V2 (ThinkServer), SE550 V2 (ThinKServer), SR588 V2 (ThinkServer), SR590 V2 (ThinkServer), P7 Intel Workstation (ThinkStation), SD630 V2 (ThinkSystem), SD650 V2 (ThinkSystem), SD650-N V2 (ThinkSystem), SN550 V2 (ThinkSystem), SR630 V2 (ThinkSystem), SR650 V2 (ThinkSystem), SR670 V2 (ThinkSystem), SR850 V2 (ThinkSystem), SR860 V2 (ThinkSystem), ST50 V2 (ThinkSystem), ST58 V2 (ThinkSystem), ST650 V2 (ThinkSystem), ST658 V2 (ThinkSystem), ОСОН ОСнова Оnyx (запись в едином реестре российских программ №5913), ROSA Virtualization 3.0 (запись в едином реестре российских программ №21308), МСВСфера

Versions

- (Intel Xeon D), 7.3 (РЕД ОС), 1.7 (Astra Linux Special Edition), - (3rd Generation Intel Xeon Scalable Processors), - (4th Generation Intel Xeon Scalable processors), - (4th Generation Intel Xeon Platinum processors), - (4th Generation Intel Xeon Gold Processors), - (4th Generation Intel Xeon Silver Processor), - (4th Generation Intel Xeon Bronze Processor), - (4th Gen Intel Xeon Scalable Processors with Intel vRAN), до AFE128F (HX5530 Appliance (ThinkAgile)), до AFE128F (VX3331 Certified Node (ThinkAgile)), до AFE128F (HX1331 Certified Node (ThinkAgile)), до AFE128F (HX2330 Appliance (ThinkAgile)), до AFE128F (HX2331 Certified Node (ThinkAgile)), до AFE128F (HX3330 Appliance (ThinkAgile)), до AFE128F (HX3331 Certified Node (ThinkAgile)), до AFE128F (HX3331 Node SAP HANA (ThinkAgile)), до AFE128F (HX5531 Certified Node (ThinkAgile)), до AFE128F (HX7530 Appl for SAP HANA (ThinkAgile)), до AFE128F (HX7531 Certified Node (ThinkAgile)), до AFE128F (HX7531 Node SAP HANA (ThinkAgile)), до AFE128F (MX3330-F All-flash Appliance (ThinkAgile)), до AFE128F (MX3330-H Hybrid Appliance (ThinkAgile)), до AFE128F (MX3331-F All-flash Certified node (ThinkAgile)), до AFE128F (MX3331-H Hybrid Certified node (ThinkAgile)), до AFE128F (MX3530 F All flash Appliance (ThinkAgile)), до AFE128F (MX3530-H Hybrid Appliance (ThinkAgile)), до AFE128F (MX3531 H Hybrid Certified node (ThinkAgile)), до AFE128F (MX3531-F All-flash Certified node (ThinkAgile)), до AFE128F (VX2330 Appliance (ThinkAgile)), до AFE128F (VX3330 Appliance (ThinkAgile)), до AFE128F (VX3530-G Appliance (ThinkAgile)), до AFE128F (VX5530 Appliance (ThinkAgile)), до AFE128F (VX7530 Appliance (ThinkAgile)), до AFE128F (VX7531 Certified Node (ThinkAgile)), до AFE128F (VX7330 Appliance (Thinkagile)), до IYE108G-2.11 (SE350 V2 (ThinkEdge)), до IYE108G-2.11 (SE360 V2 (ThinkEdge)), до L0.64 (DN8836 (ThinkServer)), до XWE104A-1.16 (DN8848 V2 (ThinkServer)), до XWE168D-2.64 (SE550 V2 (ThinKServer)), до XWE160F-1.14 (SR588 V2 (ThinkServer)), до XWE160F-1.14 (SR590 V2 (ThinkServer)), до S0DKT16A (P7 Intel Workstation (ThinkStation)), до U8E128F (SD630 V2 (ThinkSystem)), до U8E128F (SD650 V2 (ThinkSystem)), до U8E128F (SD650-N V2 (ThinkSystem)), до U8E128F (SN550 V2 (ThinkSystem)), до AFE128F (SR630 V2 (ThinkSystem)), до AFE128F (SR650 V2 (ThinkSystem)), до U8E128F (SR670 V2 (ThinkSystem)), до M5E128E-2.30 (SR850 V2 (ThinkSystem)), до M5E128E-2.30 (SR860 V2 (ThinkSystem)), до TOE110D (ST50 V2 (ThinkSystem)), до TOE110D (ST58 V2 (ThinkSystem)), до U8E128F (ST650 V2 (ThinkSystem)), до U8E128F (ST658 V2 (ThinkSystem)), до 2.11 (ОСОН ОСнова Оnyx), 3.0 (ROSA Virtualization 3.0), 9.5 (МСВСфера)

Product types

Firmware, Operating system, Virtualization software

Platforms

ООО «Ред Софт» РЕД ОС 7.3 (запись в едином реестре российских программ №3751), ООО «РусБИТех-Астра» Astra Linux Special Edition 1.7 (запись в едином реестре российских программ №369), АО «НППКТ» ОСОН ОСнова Оnyx до 2.11 (запись в едином реестре российских программ №5913), АО «НТЦ ИТ РОСА» ROSA Virtualization 3.0 3.0 (запись в едином реестре российских программ №21308), ООО «НЦПР» МСВСфера 9.5

Mitigations

Использование рекомендаций: Для продуктов Intel.corp: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html Для продуктов Lenovo: https://support.lenovo.com/us/en/product_security/LEN-155477 Для ОСОН ОСнова Оnyx (2.11): Обновление программного обеспечения intel-microcode до версии 3.20240312.1~deb10u1 Для РедОС: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/ Для ОС Astra Linux: обновить пакет intel-microcode до 3.20240813.1~deb12u1+ci202409161120+astra3 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17 Для программной системы управления средой виртуализации с подсистемой безагентного резервного копирования виртуальных машин «ROSA Virtualization 3.0»: https://abf.rosa.ru/advisories/ROSA-SA-2025-2811 Для МСВСфера: https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:M/C:P/I:C/A:N",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:H/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Intel Corp., \u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb, \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb, Lenovo Group Limited, \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb, \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb, \u041e\u041e\u041e \u00ab\u041d\u0426\u041f\u0420\u00bb",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Intel Xeon D), 7.3 (\u0420\u0415\u0414 \u041e\u0421), 1.7 (Astra Linux Special Edition), - (3rd Generation Intel Xeon Scalable Processors), - (4th Generation Intel Xeon Scalable processors), - (4th Generation Intel Xeon Platinum processors), - (4th Generation Intel Xeon Gold Processors), - (4th Generation Intel Xeon Silver Processor), - (4th Generation Intel Xeon Bronze Processor), - (4th Gen Intel Xeon Scalable Processors with Intel vRAN), \u0434\u043e AFE128F (HX5530 Appliance (ThinkAgile)), \u0434\u043e AFE128F (VX3331 Certified Node (ThinkAgile)), \u0434\u043e AFE128F (HX1331 Certified Node (ThinkAgile)), \u0434\u043e AFE128F (HX2330 Appliance (ThinkAgile)), \u0434\u043e AFE128F (HX2331 Certified Node (ThinkAgile)), \u0434\u043e AFE128F (HX3330 Appliance (ThinkAgile)), \u0434\u043e AFE128F (HX3331 Certified Node (ThinkAgile)), \u0434\u043e AFE128F (HX3331 Node SAP HANA (ThinkAgile)), \u0434\u043e AFE128F (HX5531 Certified Node (ThinkAgile)), \u0434\u043e AFE128F (HX7530 Appl for SAP HANA (ThinkAgile)), \u0434\u043e AFE128F (HX7531 Certified Node (ThinkAgile)), \u0434\u043e AFE128F (HX7531 Node SAP HANA (ThinkAgile)), \u0434\u043e AFE128F (MX3330-F All-flash Appliance (ThinkAgile)), \u0434\u043e AFE128F (MX3330-H Hybrid Appliance (ThinkAgile)), \u0434\u043e AFE128F (MX3331-F All-flash Certified node (ThinkAgile)), \u0434\u043e AFE128F (MX3331-H Hybrid Certified node (ThinkAgile)), \u0434\u043e AFE128F (MX3530 F All flash Appliance (ThinkAgile)), \u0434\u043e AFE128F (MX3530-H Hybrid Appliance (ThinkAgile)), \u0434\u043e AFE128F (MX3531 H Hybrid Certified node (ThinkAgile)), \u0434\u043e AFE128F (MX3531-F All-flash Certified node (ThinkAgile)), \u0434\u043e AFE128F (VX2330 Appliance (ThinkAgile)), \u0434\u043e AFE128F (VX3330 Appliance (ThinkAgile)), \u0434\u043e AFE128F (VX3530-G Appliance (ThinkAgile)), \u0434\u043e AFE128F (VX5530 Appliance (ThinkAgile)), \u0434\u043e AFE128F (VX7530 Appliance (ThinkAgile)), \u0434\u043e AFE128F (VX7531 Certified Node (ThinkAgile)), \u0434\u043e AFE128F (VX7330 Appliance (Thinkagile)), \u0434\u043e IYE108G-2.11 (SE350 V2 (ThinkEdge)), \u0434\u043e IYE108G-2.11 (SE360 V2 (ThinkEdge)), \u0434\u043e L0.64 (DN8836 (ThinkServer)), \u0434\u043e XWE104A-1.16 (DN8848 V2 (ThinkServer)), \u0434\u043e XWE168D-2.64 (SE550 V2 (ThinKServer)), \u0434\u043e XWE160F-1.14 (SR588 V2 (ThinkServer)), \u0434\u043e XWE160F-1.14 (SR590 V2 (ThinkServer)), \u0434\u043e S0DKT16A (P7 Intel Workstation (ThinkStation)), \u0434\u043e U8E128F (SD630 V2 (ThinkSystem)), \u0434\u043e U8E128F (SD650 V2 (ThinkSystem)), \u0434\u043e U8E128F (SD650-N V2 (ThinkSystem)), \u0434\u043e U8E128F (SN550 V2 (ThinkSystem)), \u0434\u043e AFE128F (SR630 V2 (ThinkSystem)), \u0434\u043e AFE128F (SR650 V2 (ThinkSystem)), \u0434\u043e U8E128F (SR670 V2 (ThinkSystem)), \u0434\u043e M5E128E-2.30 (SR850 V2 (ThinkSystem)), \u0434\u043e M5E128E-2.30 (SR860 V2 (ThinkSystem)), \u0434\u043e TOE110D (ST50 V2 (ThinkSystem)), \u0434\u043e TOE110D (ST58 V2 (ThinkSystem)), \u0434\u043e U8E128F (ST650 V2 (ThinkSystem)), \u0434\u043e U8E128F (ST658 V2 (ThinkSystem)), \u0434\u043e 2.11 (\u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx), 3.0 (ROSA Virtualization 3.0), 9.5 (\u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Intel.corp:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477\n\n\u0414\u043b\u044f \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (2.11):\n\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f intel-microcode \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 3.20240312.1~deb10u1\n\n\u0414\u043b\u044f \u0420\u0435\u0434\u041e\u0421: http://repo.red-soft.ru/redos/7.3c/x86_64/updates/\n\n\u0414\u043b\u044f \u041e\u0421 Astra Linux:\n\u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442 intel-microcode \u0434\u043e 3.20240813.1~deb12u1+ci202409161120+astra3 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u044f: https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0440\u0435\u0434\u043e\u0439 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 \u0431\u0435\u0437\u0430\u0433\u0435\u043d\u0442\u043d\u043e\u0433\u043e \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d \u00abROSA Virtualization 3.0\u00bb: https://abf.rosa.ru/advisories/ROSA-SA-2025-2811\n\n\u0414\u043b\u044f \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430: https://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "19.11.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02527",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-22655, INTEL-SA-00960, LEN-155477",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Intel Xeon D, \u0420\u0415\u0414 \u041e\u0421 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), Astra Linux Special Edition (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), 3rd Generation Intel Xeon Scalable Processors, 4th Generation Intel Xeon Scalable processors, 4th Generation Intel Xeon Platinum processors, 4th Generation Intel Xeon Gold Processors, 4th Generation Intel Xeon Silver Processor, 4th Generation Intel Xeon Bronze Processor, 4th Gen Intel Xeon Scalable Processors with Intel vRAN, HX5530 Appliance (ThinkAgile), VX3331 Certified Node (ThinkAgile), HX1331 Certified Node (ThinkAgile), HX2330 Appliance (ThinkAgile), HX2331 Certified Node (ThinkAgile), HX3330 Appliance (ThinkAgile), HX3331 Certified Node (ThinkAgile), HX3331 Node SAP HANA (ThinkAgile), HX5531 Certified Node (ThinkAgile), HX7530 Appl for SAP HANA (ThinkAgile), HX7531 Certified Node (ThinkAgile), HX7531 Node SAP HANA (ThinkAgile), MX3330-F All-flash Appliance (ThinkAgile), MX3330-H Hybrid Appliance (ThinkAgile), MX3331-F All-flash Certified node (ThinkAgile), MX3331-H Hybrid Certified node (ThinkAgile), MX3530 F All flash Appliance (ThinkAgile), MX3530-H Hybrid Appliance (ThinkAgile), MX3531 H Hybrid Certified node (ThinkAgile), MX3531-F All-flash Certified node (ThinkAgile), VX2330 Appliance (ThinkAgile), VX3330 Appliance (ThinkAgile), VX3530-G Appliance (ThinkAgile), VX5530 Appliance (ThinkAgile), VX7530 Appliance (ThinkAgile), VX7531 Certified Node (ThinkAgile), VX7330 Appliance (Thinkagile), SE350 V2 (ThinkEdge), SE360 V2 (ThinkEdge), DN8836 (ThinkServer), DN8848 V2 (ThinkServer), SE550 V2 (ThinKServer), SR588 V2 (ThinkServer), SR590 V2 (ThinkServer), P7 Intel Workstation (ThinkStation), SD630 V2 (ThinkSystem), SD650 V2 (ThinkSystem), SD650-N V2 (ThinkSystem), SN550 V2 (ThinkSystem), SR630 V2 (ThinkSystem), SR650 V2 (ThinkSystem), SR670 V2 (ThinkSystem), SR850 V2 (ThinkSystem), SR860 V2 (ThinkSystem), ST50 V2 (ThinkSystem), ST58 V2 (ThinkSystem), ST650 V2 (ThinkSystem), ST658 V2 (ThinkSystem), \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), ROSA Virtualization 3.0 (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211621308), \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "\u041e\u041e\u041e \u00ab\u0420\u0435\u0434 \u0421\u043e\u0444\u0442\u00bb \u0420\u0415\u0414 \u041e\u0421 7.3  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21163751), \u041e\u041e\u041e \u00ab\u0420\u0443\u0441\u0411\u0418\u0422\u0435\u0445-\u0410\u0441\u0442\u0440\u0430\u00bb Astra Linux Special Edition 1.7  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u2116369), \u0410\u041e \u00ab\u041d\u041f\u041f\u041a\u0422\u00bb \u041e\u0421\u041e\u041d \u041e\u0421\u043d\u043e\u0432\u0430 \u041enyx \u0434\u043e 2.11  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u21165913), \u0410\u041e \u00ab\u041d\u0422\u0426 \u0418\u0422 \u0420\u041e\u0421\u0410\u00bb ROSA Virtualization 3.0 3.0  (\u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0435\u0434\u0438\u043d\u043e\u043c \u0440\u0435\u0435\u0441\u0442\u0440\u0435 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u211621308), \u041e\u041e\u041e \u00ab\u041d\u0426\u041f\u0420\u00bb \u041c\u0421\u0412\u0421\u0444\u0435\u0440\u0430 9.5 ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-693)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00960.html\nhttps://support.lenovo.com/us/en/product_security/LEN-155477\nhttps://\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430.\u043d\u043f\u043f\u043a\u0442.\u0440\u0444/bin/view/\u041e\u0421\u043d\u043e\u0432\u0430/\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f/2.11/\nhttp://repo.red-soft.ru/redos/7.3c/x86_64/updates/\nhttps://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0319SE17\nhttps://abf.rosa.ru/advisories/ROSA-SA-2025-2811\nhttps://errata.msvsphere-os.ru/definition/9/INFCSA-2024:9401?lang=ru",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430, \u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438/\u041f\u041e \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-693",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,4)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,1)"
}

BDU:2024-02528 (CVE-2020-5952)

Vulnerability from fstec – Published: 2024-04-03 – Updated: 2024-04-03 – View on bdu.fstec.ru Fixed

Title

Уязвимость реализации режима управления системой System Management Mode (SMM) микропрограммного обеспечения ноутбуков Lenovo, позволяющая нарушителю повысить свои привилегии и выполнить произвольный код

Summary

Уязвимость реализации режима управления системой System Management Mode (SMM) микропрограммного обеспечения ноутбуков Lenovo связана с недостаточной проверкой входных данных. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии и выполнить произвольный код

Severity

5.3 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:M/C:C/I:C/A:N

7.2 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Resource manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-20 - Недостаточная проверка вводимых данных

Aliases

CVE-2020-5952, LEN-155477

References

1 reference

URL
https://support.lenovo.com/us/en/product_security/LEN-155477

Impacted products

7 products from 1 vendor

Vendors

Lenovo Group Limited

Products

IdeaPad 1-14IGL07 Laptop, IdeaPad 1-15IGL07 Laptop, IdeaPad 3-15IGL05, IdeaPad Duet 3 10IGL5, IdeaPad 1-14IGL05 Laptop, Lenovo V14-IGL, Lenovo V15-IGL

Versions

до KKCN21WW (IdeaPad 1-14IGL07 Laptop), до KKCN21WW (IdeaPad 1-15IGL07 Laptop), до DVCN32WW (IdeaPad 3-15IGL05), до EQCN31WW (IdeaPad Duet 3 10IGL5), до DVCN32WW (IdeaPad 1-14IGL05 Laptop), до DVCN32WW (Lenovo V14-IGL), до DVCN32WW (Lenovo V15-IGL)

Product types

Firmware

Mitigations

Использование рекомендаций: https://support.lenovo.com/us/en/product_security/LEN-155477

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:M/C:C/I:C/A:N",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e KKCN21WW (IdeaPad 1-14IGL07 Laptop), \u0434\u043e KKCN21WW (IdeaPad 1-15IGL07 Laptop), \u0434\u043e DVCN32WW (IdeaPad 3-15IGL05), \u0434\u043e EQCN31WW (IdeaPad Duet 3 10IGL5), \u0434\u043e DVCN32WW (IdeaPad 1-14IGL05 Laptop), \u0434\u043e DVCN32WW (Lenovo V14-IGL), \u0434\u043e DVCN32WW (Lenovo V15-IGL)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "03.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02528",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2020-5952, LEN-155477",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "IdeaPad 1-14IGL07 Laptop, IdeaPad 1-15IGL07 Laptop, IdeaPad 3-15IGL05, IdeaPad Duet 3 10IGL5, IdeaPad 1-14IGL05 Laptop, Lenovo V14-IGL, Lenovo V15-IGL",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u0430\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0430 \u0432\u0432\u043e\u0434\u0438\u043c\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (CWE-20)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0435\u0436\u0438\u043c\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439 System Management Mode (SMM) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043d\u043e\u0443\u0442\u0431\u0443\u043a\u043e\u0432 Lenovo \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-20",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,3)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)"
}

BDU:2025-07345 (CVE-2023-28149)

Vulnerability from fstec – Published: 2025-06-23 – Updated: 2025-06-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость компонента IhisiServiceSmm фреймворка для создания UEFI-прошивок InsydeH2O, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость компонента IhisiServiceSmm фреймворка для создания UEFI-прошивок InsydeH2O связана с записью за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии

Severity

4.4 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:M/C:N/I:C/A:P

6.1 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-787 - Запись за границами буфера

Aliases

CVE-2023-28149, LEN-155477, INSYDE-SA-2023040

References

2 references

URL
https://www.insyde.com/security-pledge/SA-2023040
https://support.lenovo.com/us/en/product_security/LEN-155477

Impacted products

102 products from 2 vendors

Vendors

Lenovo Group Limited, Insyde

Products

IdeaPad Duet 3 10IGL5, IdeaPad Duet 3 11IAN8, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 7 16IAX7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, Yoga Slim 7 ProX 14IAH7, IdeaPad 5 14IAL7, IdeaPad 5 Pro 16IAH7, IdeaPad Duet 5 12IAU7, IdeaPad Duet 5 12IRU8, IdeaPad Gaming 3 15IAH7 Laptop, IdeaPad Gaming 3 16IAH7, IdeaPad Pro 5 14IRH8, Lenovo Slim 7 14IRP8, Slim 7 16IAH7 Laptop, ThinkBook 14 G4+ IAP Laptop, ThinkBook 16 G4+ IAP Laptop, Yoga 7 14IRL8, Yoga 7 16IRL8, Yoga Book 9 13IRU8, Yoga Pro 7 14IRH8, Yoga Slim 6 14IAP8, Yoga Slim 6 14IRP8, Yoga Slim 7 Pro 16IAH7 Laptop, Yoga Slim 9 14IAP7, IdeaPad Slim 5 14IAH8, IdeaPad Slim 5 16ABR8, IdeaPad Slim 5 16IAH8, IdeaPad 5 14ABA7, IdeaPad 5 Pro 14ARH7, IdeaPad 5 Pro 14IAP7, IdeaPad 5 Pro 16ARH7, ideapad 5 Pro-14ACN6, ideapad 5 Pro-14ITL6, ideapad 5 Pro-16ACH6, ideapad 5 Pro-16IHU6, ideapad 5-14ALC05, IdeaPad 5-14ITL05, ideapad Creator 5-16ACH6, IdeaPad Gaming 3 15ARH7, IdeaPad Gaming 3 16ARH7, ideapad Gaming 3-15ACH6, IdeaPad Gaming 3-15IHU6, IdeaPad Pro 5 14APH8, IdeaPad Pro 5 14ARP8, IdeaPad Slim 5 14ABR8, IdeaPad Slim 5 14IRL8, IdeaPad Slim 5 16IRL8, Legion S7 16IRH8, Legion Slim 5 16APH8, Legion Slim 5 16IRH8, Slim 7 16ARH7, Lenovo Slim Pro 7 14ARP8, LOQ 15APH8, LOQ 15IRH8, LOQ 16APH8, LOQ 16IRH8, Slim 7 Pro 16ACH6 Laptop, ThinkBook 13x ITG, ThinkBook 14 G2 ITL Laptop, ThinkBook 14 G3 ACL, ThinkBook 14 G3 ITL, ThinkBook 14 G4 ABA Laptop, ThinkBook 14 G4+ ARA, ThinkBook 14 G5 ABP, ThinkBook 14 G5 IRL, ThinkBook 14s Yoga G3 IRU, ThinkBook 14s Yoga ITL, ThinkBook 15 G2 ITL Laptop, ThinkBook 15 G3 ACL, ThinkBook 15 G3 ITL Laptop, ThinkBook 15 G4 ABA Laptop, ThinkBook 15 G5 ABP, ThinkBook 15 G5 IRL, ThinkBook 16 G4+ ARA, ThinkBook 16p NX ARH, ThinkBook Plus G2 ITG, ThinkBook Plus G3 IAP, Yoga 6 13ABR8, Yoga 6 13ALC7, Yoga 6-13ALC6, Yoga 7 14ARP8, Yoga 7 16ARP8, Yoga Duet 7-13ITL6-LTE, Yoga Duet 7-13ITL6, Yoga Pro 7 14ARP8, Yoga Slim 7 Carbon-14ACN06, Yoga Slim 7 Pro 16ACH6 Laptop, Yoga Slim 7 Pro 16ARH7, Yoga Slim 7-13ACN05 Laptop, InsydeH2O, H2OFFT Client, H2OFFT Server, H2OUVE, H2OOAE

Versions

до EQCN41WW (IdeaPad Duet 3 10IGL5), до LSCN25WW (IdeaPad Duet 3 11IAN8), до HTCN39WW (IdeaPad 1-14IJL7 Laptop), до HTCN39WW (IdeaPad 1-15IJL7 Laptop), до KUCN33WW (IdeaPad Slim 3 14IAN8), до KUCN33WW (IdeaPad Slim 3 15IAN8), до K1CN45WW (Legion 7 16IAX7), до HMCN48WW (Lenovo Slim 7 ProX 14IAH7), до J3CN55WW (Lenovo Slim 9 14IAP7), до HTCN39WW (Lenovo V14 G2 IJL), до HTCN39WW (Lenovo V15 G2 IJL Laptop), до KUCN33WW (Lenovo V15 G4 IAN), до HMCN48WW (Yoga Slim 7 ProX 14IAH7), до JLCN37WW (IdeaPad 5 14IAL7), до J5CN34WW (IdeaPad 5 Pro 16IAH7), до JXCN48WW (IdeaPad Duet 5 12IAU7), до M7CN20WW (IdeaPad Duet 5 12IRU8), до JMCN45WW (IdeaPad Gaming 3 15IAH7 Laptop), до JMCN45WW (IdeaPad Gaming 3 16IAH7), до LJCN29WW (IdeaPad Pro 5 14IRH8), до LGCN28WW (Lenovo Slim 7 14IRP8), до KMCN20WW (Slim 7 16IAH7 Laptop), до HYCN48WW (ThinkBook 14 G4+ IAP Laptop), до HYCN48WW (ThinkBook 16 G4+ IAP Laptop), до LHCN22WW (Yoga 7 14IRL8), до LHCN22WW (Yoga 7 16IRL8), до KXCN36WW (Yoga Book 9 13IRU8), до LWCN26WW (Yoga Pro 7 14IRH8), до KTCN41WW (Yoga Slim 6 14IAP8), до LGCN28WW (Yoga Slim 6 14IRP8), до KMCN20WW (Yoga Slim 7 Pro 16IAH7 Laptop), до J3CN55WW (Yoga Slim 9 14IAP7), до LACN31WW (IdeaPad Slim 5 14IAH8), до L9CN24WW (IdeaPad Slim 5 16ABR8), до LACN31WW (IdeaPad Slim 5 16IAH8), до K3CN24WW (IdeaPad 5 14ABA7), до J8CN37WW (IdeaPad 5 Pro 14ARH7), до J0CN40WW (IdeaPad 5 Pro 14IAP7), до J4CN40WW (IdeaPad 5 Pro 16ARH7), до GECN37WW (ideapad 5 Pro-14ACN6), до GDCN68WW (ideapad 5 Pro-14ITL6), до GSCN39WW (ideapad 5 Pro-16ACH6), до GRCN29WW (ideapad 5 Pro-16IHU6), до G5CN69WW (ideapad 5-14ALC05), до FKCN50WW (IdeaPad 5-14ITL05), до GSCN39WW (ideapad Creator 5-16ACH6), до JNCN50WW (IdeaPad Gaming 3 15ARH7), до JNCN50WW (IdeaPad Gaming 3 16ARH7), до H3CN46WW (ideapad Gaming 3-15ACH6), до H4CN34WW (IdeaPad Gaming 3-15IHU6), до MKCN31WW (IdeaPad Pro 5 14APH8), до JWCN22WW (IdeaPad Pro 5 14ARP8), до L9CN24WW (IdeaPad Slim 5 14ABR8), до LACN31WW (IdeaPad Slim 5 14IRL8), до LACN31WW (IdeaPad Slim 5 16IRL8), до M0CN35WW (Legion S7 16IRH8), до M3CN42WW (Legion Slim 5 16APH8), до M2CN31WW (Legion Slim 5 16IRH8), до KLCN21WW (Slim 7 16ARH7), до LNCN21WW (Lenovo Slim Pro 7 14ARP8), до LYCN41WW (LOQ 15APH8), до LZCN34WW (LOQ 15IRH8), до LYCN41WW (LOQ 16APH8), до LZCN34WW (LOQ 16IRH8), до HUCN20WW (Slim 7 Pro 16ACH6 Laptop), до HLCN35WW (ThinkBook 13x ITG), до F8CN57WW (ThinkBook 14 G2 ITL Laptop), до GQCN43WW (ThinkBook 14 G3 ACL), до HRCN18WW (ThinkBook 14 G3 ITL), до JPCN27WW (ThinkBook 14 G4 ABA Laptop), до J6CN48WW (ThinkBook 14 G4+ ARA), до LMCN20WW (ThinkBook 14 G5 ABP), до LVCN21WW (ThinkBook 14 G5 IRL), до LVCN21WW (ThinkBook 14s Yoga G3 IRU), до FNCN45WW (ThinkBook 14s Yoga ITL), до F8CN57WW (ThinkBook 15 G2 ITL Laptop), до GQCN43WW (ThinkBook 15 G3 ACL), до HRCN18WW (ThinkBook 15 G3 ITL Laptop), до JPCN27WW (ThinkBook 15 G4 ABA Laptop), до LMCN20WW (ThinkBook 15 G5 ABP), до LVCN21WW (ThinkBook 15 G5 IRL), до J6CN48WW (ThinkBook 16 G4+ ARA), до KJCN33WW (ThinkBook 16p NX ARH), до GYCN37WW (ThinkBook Plus G2 ITG), до K6CN34WW (ThinkBook Plus G3 IAP), до L5CN19WW (Yoga 6 13ABR8), до JECN22WW (Yoga 6 13ALC7), до H6CN21WW (Yoga 6-13ALC6), до LCCN20WW (Yoga 7 14ARP8), до LCCN20WW (Yoga 7 16ARP8), до GPCN28WW (Yoga Duet 7-13ITL6-LTE), до GPCN28WW (Yoga Duet 7-13ITL6), до LNCN21WW (Yoga Pro 7 14ARP8), до H5CN42WW (Yoga Slim 7 Carbon-14ACN06), до HUCN20WW (Yoga Slim 7 Pro 16ACH6 Laptop), до KLCN21WW (Yoga Slim 7 Pro 16ARH7), до GHCN32WW (Yoga Slim 7-13ACN05 Laptop), от 5.2 до 05.28.42 (InsydeH2O), от 5.3 до 05.37.42 (InsydeH2O), от 5.4 до 05.45.39 (InsydeH2O), от 5.5 до 05.53.39 (InsydeH2O), от 5.6 до 05.60.39 (InsydeH2O), до 3.00.21.00 (H2OFFT Client), до 3.00.11.00 (H2OFFT Client), до 200.02.00.08 (H2OFFT Server), до 200.02.00.13 (H2OUVE), до 200.02.00.03 (H2OOAE)

Product types

Firmware, Application software

Mitigations

Использование рекомендаций: Для Insyde: https://www.insyde.com/security-pledge/SA-2023040 Для Lenovo: https://support.lenovo.com/us/en/product_security/LEN-155477

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:M/C:N/I:C/A:P",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited, Insyde",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e EQCN41WW (IdeaPad Duet 3 10IGL5), \u0434\u043e LSCN25WW (IdeaPad Duet 3 11IAN8), \u0434\u043e HTCN39WW (IdeaPad 1-14IJL7 Laptop), \u0434\u043e HTCN39WW (IdeaPad 1-15IJL7 Laptop), \u0434\u043e KUCN33WW (IdeaPad Slim 3 14IAN8), \u0434\u043e KUCN33WW (IdeaPad Slim 3 15IAN8), \u0434\u043e K1CN45WW (Legion 7 16IAX7), \u0434\u043e HMCN48WW (Lenovo Slim 7 ProX 14IAH7), \u0434\u043e J3CN55WW (Lenovo Slim 9 14IAP7), \u0434\u043e HTCN39WW (Lenovo V14 G2 IJL), \u0434\u043e HTCN39WW (Lenovo V15 G2 IJL Laptop), \u0434\u043e KUCN33WW (Lenovo V15 G4 IAN), \u0434\u043e HMCN48WW (Yoga Slim 7 ProX 14IAH7), \u0434\u043e JLCN37WW (IdeaPad 5 14IAL7), \u0434\u043e J5CN34WW (IdeaPad 5 Pro 16IAH7), \u0434\u043e JXCN48WW (IdeaPad Duet 5 12IAU7), \u0434\u043e M7CN20WW (IdeaPad Duet 5 12IRU8), \u0434\u043e JMCN45WW (IdeaPad Gaming 3 15IAH7 Laptop), \u0434\u043e JMCN45WW (IdeaPad Gaming 3 16IAH7), \u0434\u043e LJCN29WW (IdeaPad Pro 5 14IRH8), \u0434\u043e LGCN28WW (Lenovo Slim 7 14IRP8), \u0434\u043e KMCN20WW (Slim 7 16IAH7 Laptop), \u0434\u043e HYCN48WW (ThinkBook 14 G4+ IAP Laptop), \u0434\u043e HYCN48WW (ThinkBook 16 G4+ IAP Laptop), \u0434\u043e LHCN22WW (Yoga 7 14IRL8), \u0434\u043e LHCN22WW (Yoga 7 16IRL8), \u0434\u043e KXCN36WW (Yoga Book 9 13IRU8), \u0434\u043e LWCN26WW (Yoga Pro 7 14IRH8), \u0434\u043e KTCN41WW (Yoga Slim 6 14IAP8), \u0434\u043e LGCN28WW (Yoga Slim 6 14IRP8), \u0434\u043e KMCN20WW (Yoga Slim 7 Pro 16IAH7 Laptop), \u0434\u043e J3CN55WW (Yoga Slim 9 14IAP7), \u0434\u043e LACN31WW (IdeaPad Slim 5 14IAH8), \u0434\u043e L9CN24WW (IdeaPad Slim 5 16ABR8), \u0434\u043e LACN31WW (IdeaPad Slim 5 16IAH8), \u0434\u043e K3CN24WW (IdeaPad 5 14ABA7), \u0434\u043e J8CN37WW (IdeaPad 5 Pro 14ARH7), \u0434\u043e J0CN40WW (IdeaPad 5 Pro 14IAP7), \u0434\u043e J4CN40WW (IdeaPad 5 Pro 16ARH7), \u0434\u043e GECN37WW (ideapad 5 Pro-14ACN6), \u0434\u043e GDCN68WW (ideapad 5 Pro-14ITL6), \u0434\u043e GSCN39WW (ideapad 5 Pro-16ACH6), \u0434\u043e GRCN29WW (ideapad 5 Pro-16IHU6), \u0434\u043e G5CN69WW (ideapad 5-14ALC05), \u0434\u043e FKCN50WW (IdeaPad 5-14ITL05), \u0434\u043e GSCN39WW (ideapad Creator 5-16ACH6), \u0434\u043e JNCN50WW (IdeaPad Gaming 3 15ARH7), \u0434\u043e JNCN50WW (IdeaPad Gaming 3 16ARH7), \u0434\u043e H3CN46WW (ideapad Gaming 3-15ACH6), \u0434\u043e H4CN34WW (IdeaPad Gaming 3-15IHU6), \u0434\u043e MKCN31WW (IdeaPad Pro 5 14APH8), \u0434\u043e JWCN22WW (IdeaPad Pro 5 14ARP8), \u0434\u043e L9CN24WW (IdeaPad Slim 5 14ABR8), \u0434\u043e LACN31WW (IdeaPad Slim 5 14IRL8), \u0434\u043e LACN31WW (IdeaPad Slim 5 16IRL8), \u0434\u043e M0CN35WW (Legion S7 16IRH8), \u0434\u043e M3CN42WW (Legion Slim 5 16APH8), \u0434\u043e M2CN31WW (Legion Slim 5 16IRH8), \u0434\u043e KLCN21WW (Slim 7 16ARH7), \u0434\u043e LNCN21WW (Lenovo Slim Pro 7 14ARP8), \u0434\u043e LYCN41WW (LOQ 15APH8), \u0434\u043e LZCN34WW (LOQ 15IRH8), \u0434\u043e LYCN41WW (LOQ 16APH8), \u0434\u043e LZCN34WW (LOQ 16IRH8), \u0434\u043e HUCN20WW (Slim 7 Pro 16ACH6 Laptop), \u0434\u043e HLCN35WW (ThinkBook 13x ITG), \u0434\u043e F8CN57WW (ThinkBook 14 G2 ITL Laptop), \u0434\u043e GQCN43WW (ThinkBook 14 G3 ACL), \u0434\u043e HRCN18WW (ThinkBook 14 G3 ITL), \u0434\u043e JPCN27WW (ThinkBook 14 G4 ABA Laptop), \u0434\u043e J6CN48WW (ThinkBook 14 G4+ ARA), \u0434\u043e LMCN20WW (ThinkBook 14 G5 ABP), \u0434\u043e LVCN21WW (ThinkBook 14 G5 IRL), \u0434\u043e LVCN21WW (ThinkBook 14s Yoga G3 IRU), \u0434\u043e FNCN45WW (ThinkBook 14s Yoga ITL), \u0434\u043e F8CN57WW (ThinkBook 15 G2 ITL Laptop), \u0434\u043e GQCN43WW (ThinkBook 15 G3 ACL), \u0434\u043e HRCN18WW (ThinkBook 15 G3 ITL Laptop), \u0434\u043e JPCN27WW (ThinkBook 15 G4 ABA Laptop), \u0434\u043e LMCN20WW (ThinkBook 15 G5 ABP), \u0434\u043e LVCN21WW (ThinkBook 15 G5 IRL), \u0434\u043e J6CN48WW (ThinkBook 16 G4+ ARA), \u0434\u043e KJCN33WW (ThinkBook 16p NX ARH), \u0434\u043e GYCN37WW (ThinkBook Plus G2 ITG), \u0434\u043e K6CN34WW (ThinkBook Plus G3 IAP), \u0434\u043e L5CN19WW (Yoga 6 13ABR8), \u0434\u043e JECN22WW (Yoga 6 13ALC7), \u0434\u043e H6CN21WW (Yoga 6-13ALC6), \u0434\u043e LCCN20WW (Yoga 7 14ARP8), \u0434\u043e LCCN20WW (Yoga 7 16ARP8), \u0434\u043e GPCN28WW (Yoga Duet 7-13ITL6-LTE), \u0434\u043e GPCN28WW (Yoga Duet 7-13ITL6), \u0434\u043e LNCN21WW (Yoga Pro 7 14ARP8), \u0434\u043e H5CN42WW (Yoga Slim 7 Carbon-14ACN06), \u0434\u043e HUCN20WW (Yoga Slim 7 Pro 16ACH6 Laptop), \u0434\u043e KLCN21WW (Yoga Slim 7 Pro 16ARH7), \u0434\u043e GHCN32WW (Yoga Slim 7-13ACN05 Laptop), \u043e\u0442 5.2 \u0434\u043e 05.28.42 (InsydeH2O), \u043e\u0442 5.3 \u0434\u043e 05.37.42 (InsydeH2O), \u043e\u0442 5.4 \u0434\u043e 05.45.39 (InsydeH2O), \u043e\u0442 5.5 \u0434\u043e 05.53.39 (InsydeH2O), \u043e\u0442 5.6 \u0434\u043e 05.60.39 (InsydeH2O), \u0434\u043e 3.00.21.00 (H2OFFT Client), \u0434\u043e 3.00.11.00 (H2OFFT Client), \u0434\u043e 200.02.00.08 (H2OFFT Server), \u0434\u043e 200.02.00.13 (H2OUVE), \u0434\u043e 200.02.00.03 (H2OOAE)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f Insyde:\nhttps://www.insyde.com/security-pledge/SA-2023040\n\n\u0414\u043b\u044f Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.06.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "23.06.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-07345",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-28149, LEN-155477, INSYDE-SA-2023040",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "IdeaPad Duet 3 10IGL5, IdeaPad Duet 3 11IAN8, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 7 16IAX7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, Yoga Slim 7 ProX 14IAH7, IdeaPad 5 14IAL7, IdeaPad 5 Pro 16IAH7, IdeaPad Duet 5 12IAU7, IdeaPad Duet 5 12IRU8, IdeaPad Gaming 3 15IAH7 Laptop, IdeaPad Gaming 3 16IAH7, IdeaPad Pro 5 14IRH8, Lenovo Slim 7 14IRP8, Slim 7 16IAH7 Laptop, ThinkBook 14 G4+ IAP Laptop, ThinkBook 16 G4+ IAP Laptop, Yoga 7 14IRL8, Yoga 7 16IRL8, Yoga Book 9 13IRU8, Yoga Pro 7 14IRH8, Yoga Slim 6 14IAP8, Yoga Slim 6 14IRP8, Yoga Slim 7 Pro 16IAH7 Laptop, Yoga Slim 9 14IAP7, IdeaPad Slim 5 14IAH8, IdeaPad Slim 5 16ABR8, IdeaPad Slim 5 16IAH8, IdeaPad 5 14ABA7, IdeaPad 5 Pro 14ARH7, IdeaPad 5 Pro 14IAP7, IdeaPad 5 Pro 16ARH7, ideapad 5 Pro-14ACN6, ideapad 5 Pro-14ITL6, ideapad 5 Pro-16ACH6, ideapad 5 Pro-16IHU6, ideapad 5-14ALC05, IdeaPad 5-14ITL05, ideapad Creator 5-16ACH6, IdeaPad Gaming 3 15ARH7, IdeaPad Gaming 3 16ARH7, ideapad Gaming 3-15ACH6, IdeaPad Gaming 3-15IHU6, IdeaPad Pro 5 14APH8, IdeaPad Pro 5 14ARP8, IdeaPad Slim 5 14ABR8, IdeaPad Slim 5 14IRL8, IdeaPad Slim 5 16IRL8, Legion S7 16IRH8, Legion Slim 5 16APH8, Legion Slim 5 16IRH8, Slim 7 16ARH7, Lenovo Slim Pro 7 14ARP8, LOQ 15APH8, LOQ 15IRH8, LOQ 16APH8, LOQ 16IRH8, Slim 7 Pro 16ACH6 Laptop, ThinkBook 13x ITG, ThinkBook 14 G2 ITL Laptop, ThinkBook 14 G3 ACL, ThinkBook 14 G3 ITL, ThinkBook 14 G4 ABA Laptop, ThinkBook 14 G4+ ARA, ThinkBook 14 G5 ABP, ThinkBook 14 G5 IRL, ThinkBook 14s Yoga G3 IRU, ThinkBook 14s Yoga ITL, ThinkBook 15 G2 ITL Laptop, ThinkBook 15 G3 ACL, ThinkBook 15 G3 ITL Laptop, ThinkBook 15 G4 ABA Laptop, ThinkBook 15 G5 ABP, ThinkBook 15 G5 IRL, ThinkBook 16 G4+ ARA, ThinkBook 16p NX ARH, ThinkBook Plus G2 ITG, ThinkBook Plus G3 IAP, Yoga 6 13ABR8, Yoga 6 13ALC7, Yoga 6-13ALC6, Yoga 7 14ARP8, Yoga 7 16ARP8, Yoga Duet 7-13ITL6-LTE, Yoga Duet 7-13ITL6, Yoga Pro 7 14ARP8, Yoga Slim 7 Carbon-14ACN06, Yoga Slim 7 Pro 16ACH6 Laptop, Yoga Slim 7 Pro 16ARH7, Yoga Slim 7-13ACN05 Laptop, InsydeH2O, H2OFFT Client, H2OFFT Server, H2OUVE, H2OOAE",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 IhisiServiceSmm \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a InsydeH2O, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0417\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-787)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 IhisiServiceSmm \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a InsydeH2O \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.insyde.com/security-pledge/SA-2023040\nhttps://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-787",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,4)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,1)"
}

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

Related vulnerabilities

BDU:2024-02258 (CVE-2023-28746)

BDU:2024-02522 (CVE-2023-32282)

BDU:2024-02524 (CVE-2023-38575)

BDU:2024-02525 (CVE-2023-5912)

BDU:2024-02526 (CVE-2023-32666)

BDU:2024-02527 (CVE-2023-22655)

BDU:2024-02528 (CVE-2020-5952)

BDU:2025-07345 (CVE-2023-28149)

Find a vulnerability

Search criteria ⓘ Use this form to refine search results. Full-text search supports keyword queries with ranking and filtering. You can combine vendor, product, and sources to narrow results. Enable “Apply ordering” to sort by date instead of relevance.

Related vulnerabilities

BDU:2024-02258 (CVE-2023-28746)

BDU:2024-02522 (CVE-2023-32282)

BDU:2024-02524 (CVE-2023-38575)

BDU:2024-02525 (CVE-2023-5912)

BDU:2024-02526 (CVE-2023-32666)

BDU:2024-02527 (CVE-2023-22655)

BDU:2024-02528 (CVE-2020-5952)

BDU:2025-07345 (CVE-2023-28149)

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.