Vulnerability-Lookup

BDU:2025-07345 (CVE-2023-28149)

Vulnerability from fstec – Published: 2025-06-23 – Updated: 2025-06-23 – View on bdu.fstec.ru Fixed

Title

Уязвимость компонента IhisiServiceSmm фреймворка для создания UEFI-прошивок InsydeH2O, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость компонента IhisiServiceSmm фреймворка для создания UEFI-прошивок InsydeH2O связана с записью за границами буфера в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии

Severity

4.4 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:M/C:N/I:C/A:P

6.1 (Medium) CVSS 3.1


                      
                        CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Data structure manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-787 - Запись за границами буфера

Aliases

CVE-2023-28149, LEN-155477, INSYDE-SA-2023040

References

2 references

URL
https://www.insyde.com/security-pledge/SA-2023040
https://support.lenovo.com/us/en/product_security/LEN-155477

Impacted products

102 products from 2 vendors

Vendors

Lenovo Group Limited, Insyde

Products

IdeaPad Duet 3 10IGL5, IdeaPad Duet 3 11IAN8, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 7 16IAX7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, Yoga Slim 7 ProX 14IAH7, IdeaPad 5 14IAL7, IdeaPad 5 Pro 16IAH7, IdeaPad Duet 5 12IAU7, IdeaPad Duet 5 12IRU8, IdeaPad Gaming 3 15IAH7 Laptop, IdeaPad Gaming 3 16IAH7, IdeaPad Pro 5 14IRH8, Lenovo Slim 7 14IRP8, Slim 7 16IAH7 Laptop, ThinkBook 14 G4+ IAP Laptop, ThinkBook 16 G4+ IAP Laptop, Yoga 7 14IRL8, Yoga 7 16IRL8, Yoga Book 9 13IRU8, Yoga Pro 7 14IRH8, Yoga Slim 6 14IAP8, Yoga Slim 6 14IRP8, Yoga Slim 7 Pro 16IAH7 Laptop, Yoga Slim 9 14IAP7, IdeaPad Slim 5 14IAH8, IdeaPad Slim 5 16ABR8, IdeaPad Slim 5 16IAH8, IdeaPad 5 14ABA7, IdeaPad 5 Pro 14ARH7, IdeaPad 5 Pro 14IAP7, IdeaPad 5 Pro 16ARH7, ideapad 5 Pro-14ACN6, ideapad 5 Pro-14ITL6, ideapad 5 Pro-16ACH6, ideapad 5 Pro-16IHU6, ideapad 5-14ALC05, IdeaPad 5-14ITL05, ideapad Creator 5-16ACH6, IdeaPad Gaming 3 15ARH7, IdeaPad Gaming 3 16ARH7, ideapad Gaming 3-15ACH6, IdeaPad Gaming 3-15IHU6, IdeaPad Pro 5 14APH8, IdeaPad Pro 5 14ARP8, IdeaPad Slim 5 14ABR8, IdeaPad Slim 5 14IRL8, IdeaPad Slim 5 16IRL8, Legion S7 16IRH8, Legion Slim 5 16APH8, Legion Slim 5 16IRH8, Slim 7 16ARH7, Lenovo Slim Pro 7 14ARP8, LOQ 15APH8, LOQ 15IRH8, LOQ 16APH8, LOQ 16IRH8, Slim 7 Pro 16ACH6 Laptop, ThinkBook 13x ITG, ThinkBook 14 G2 ITL Laptop, ThinkBook 14 G3 ACL, ThinkBook 14 G3 ITL, ThinkBook 14 G4 ABA Laptop, ThinkBook 14 G4+ ARA, ThinkBook 14 G5 ABP, ThinkBook 14 G5 IRL, ThinkBook 14s Yoga G3 IRU, ThinkBook 14s Yoga ITL, ThinkBook 15 G2 ITL Laptop, ThinkBook 15 G3 ACL, ThinkBook 15 G3 ITL Laptop, ThinkBook 15 G4 ABA Laptop, ThinkBook 15 G5 ABP, ThinkBook 15 G5 IRL, ThinkBook 16 G4+ ARA, ThinkBook 16p NX ARH, ThinkBook Plus G2 ITG, ThinkBook Plus G3 IAP, Yoga 6 13ABR8, Yoga 6 13ALC7, Yoga 6-13ALC6, Yoga 7 14ARP8, Yoga 7 16ARP8, Yoga Duet 7-13ITL6-LTE, Yoga Duet 7-13ITL6, Yoga Pro 7 14ARP8, Yoga Slim 7 Carbon-14ACN06, Yoga Slim 7 Pro 16ACH6 Laptop, Yoga Slim 7 Pro 16ARH7, Yoga Slim 7-13ACN05 Laptop, InsydeH2O, H2OFFT Client, H2OFFT Server, H2OUVE, H2OOAE

Versions

до EQCN41WW (IdeaPad Duet 3 10IGL5), до LSCN25WW (IdeaPad Duet 3 11IAN8), до HTCN39WW (IdeaPad 1-14IJL7 Laptop), до HTCN39WW (IdeaPad 1-15IJL7 Laptop), до KUCN33WW (IdeaPad Slim 3 14IAN8), до KUCN33WW (IdeaPad Slim 3 15IAN8), до K1CN45WW (Legion 7 16IAX7), до HMCN48WW (Lenovo Slim 7 ProX 14IAH7), до J3CN55WW (Lenovo Slim 9 14IAP7), до HTCN39WW (Lenovo V14 G2 IJL), до HTCN39WW (Lenovo V15 G2 IJL Laptop), до KUCN33WW (Lenovo V15 G4 IAN), до HMCN48WW (Yoga Slim 7 ProX 14IAH7), до JLCN37WW (IdeaPad 5 14IAL7), до J5CN34WW (IdeaPad 5 Pro 16IAH7), до JXCN48WW (IdeaPad Duet 5 12IAU7), до M7CN20WW (IdeaPad Duet 5 12IRU8), до JMCN45WW (IdeaPad Gaming 3 15IAH7 Laptop), до JMCN45WW (IdeaPad Gaming 3 16IAH7), до LJCN29WW (IdeaPad Pro 5 14IRH8), до LGCN28WW (Lenovo Slim 7 14IRP8), до KMCN20WW (Slim 7 16IAH7 Laptop), до HYCN48WW (ThinkBook 14 G4+ IAP Laptop), до HYCN48WW (ThinkBook 16 G4+ IAP Laptop), до LHCN22WW (Yoga 7 14IRL8), до LHCN22WW (Yoga 7 16IRL8), до KXCN36WW (Yoga Book 9 13IRU8), до LWCN26WW (Yoga Pro 7 14IRH8), до KTCN41WW (Yoga Slim 6 14IAP8), до LGCN28WW (Yoga Slim 6 14IRP8), до KMCN20WW (Yoga Slim 7 Pro 16IAH7 Laptop), до J3CN55WW (Yoga Slim 9 14IAP7), до LACN31WW (IdeaPad Slim 5 14IAH8), до L9CN24WW (IdeaPad Slim 5 16ABR8), до LACN31WW (IdeaPad Slim 5 16IAH8), до K3CN24WW (IdeaPad 5 14ABA7), до J8CN37WW (IdeaPad 5 Pro 14ARH7), до J0CN40WW (IdeaPad 5 Pro 14IAP7), до J4CN40WW (IdeaPad 5 Pro 16ARH7), до GECN37WW (ideapad 5 Pro-14ACN6), до GDCN68WW (ideapad 5 Pro-14ITL6), до GSCN39WW (ideapad 5 Pro-16ACH6), до GRCN29WW (ideapad 5 Pro-16IHU6), до G5CN69WW (ideapad 5-14ALC05), до FKCN50WW (IdeaPad 5-14ITL05), до GSCN39WW (ideapad Creator 5-16ACH6), до JNCN50WW (IdeaPad Gaming 3 15ARH7), до JNCN50WW (IdeaPad Gaming 3 16ARH7), до H3CN46WW (ideapad Gaming 3-15ACH6), до H4CN34WW (IdeaPad Gaming 3-15IHU6), до MKCN31WW (IdeaPad Pro 5 14APH8), до JWCN22WW (IdeaPad Pro 5 14ARP8), до L9CN24WW (IdeaPad Slim 5 14ABR8), до LACN31WW (IdeaPad Slim 5 14IRL8), до LACN31WW (IdeaPad Slim 5 16IRL8), до M0CN35WW (Legion S7 16IRH8), до M3CN42WW (Legion Slim 5 16APH8), до M2CN31WW (Legion Slim 5 16IRH8), до KLCN21WW (Slim 7 16ARH7), до LNCN21WW (Lenovo Slim Pro 7 14ARP8), до LYCN41WW (LOQ 15APH8), до LZCN34WW (LOQ 15IRH8), до LYCN41WW (LOQ 16APH8), до LZCN34WW (LOQ 16IRH8), до HUCN20WW (Slim 7 Pro 16ACH6 Laptop), до HLCN35WW (ThinkBook 13x ITG), до F8CN57WW (ThinkBook 14 G2 ITL Laptop), до GQCN43WW (ThinkBook 14 G3 ACL), до HRCN18WW (ThinkBook 14 G3 ITL), до JPCN27WW (ThinkBook 14 G4 ABA Laptop), до J6CN48WW (ThinkBook 14 G4+ ARA), до LMCN20WW (ThinkBook 14 G5 ABP), до LVCN21WW (ThinkBook 14 G5 IRL), до LVCN21WW (ThinkBook 14s Yoga G3 IRU), до FNCN45WW (ThinkBook 14s Yoga ITL), до F8CN57WW (ThinkBook 15 G2 ITL Laptop), до GQCN43WW (ThinkBook 15 G3 ACL), до HRCN18WW (ThinkBook 15 G3 ITL Laptop), до JPCN27WW (ThinkBook 15 G4 ABA Laptop), до LMCN20WW (ThinkBook 15 G5 ABP), до LVCN21WW (ThinkBook 15 G5 IRL), до J6CN48WW (ThinkBook 16 G4+ ARA), до KJCN33WW (ThinkBook 16p NX ARH), до GYCN37WW (ThinkBook Plus G2 ITG), до K6CN34WW (ThinkBook Plus G3 IAP), до L5CN19WW (Yoga 6 13ABR8), до JECN22WW (Yoga 6 13ALC7), до H6CN21WW (Yoga 6-13ALC6), до LCCN20WW (Yoga 7 14ARP8), до LCCN20WW (Yoga 7 16ARP8), до GPCN28WW (Yoga Duet 7-13ITL6-LTE), до GPCN28WW (Yoga Duet 7-13ITL6), до LNCN21WW (Yoga Pro 7 14ARP8), до H5CN42WW (Yoga Slim 7 Carbon-14ACN06), до HUCN20WW (Yoga Slim 7 Pro 16ACH6 Laptop), до KLCN21WW (Yoga Slim 7 Pro 16ARH7), до GHCN32WW (Yoga Slim 7-13ACN05 Laptop), от 5.2 до 05.28.42 (InsydeH2O), от 5.3 до 05.37.42 (InsydeH2O), от 5.4 до 05.45.39 (InsydeH2O), от 5.5 до 05.53.39 (InsydeH2O), от 5.6 до 05.60.39 (InsydeH2O), до 3.00.21.00 (H2OFFT Client), до 3.00.11.00 (H2OFFT Client), до 200.02.00.08 (H2OFFT Server), до 200.02.00.13 (H2OUVE), до 200.02.00.03 (H2OOAE)

Product types

Firmware, Application software

Mitigations

Использование рекомендаций: Для Insyde: https://www.insyde.com/security-pledge/SA-2023040 Для Lenovo: https://support.lenovo.com/us/en/product_security/LEN-155477

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:M/C:N/I:C/A:P",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Lenovo Group Limited, Insyde",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e EQCN41WW (IdeaPad Duet 3 10IGL5), \u0434\u043e LSCN25WW (IdeaPad Duet 3 11IAN8), \u0434\u043e HTCN39WW (IdeaPad 1-14IJL7 Laptop), \u0434\u043e HTCN39WW (IdeaPad 1-15IJL7 Laptop), \u0434\u043e KUCN33WW (IdeaPad Slim 3 14IAN8), \u0434\u043e KUCN33WW (IdeaPad Slim 3 15IAN8), \u0434\u043e K1CN45WW (Legion 7 16IAX7), \u0434\u043e HMCN48WW (Lenovo Slim 7 ProX 14IAH7), \u0434\u043e J3CN55WW (Lenovo Slim 9 14IAP7), \u0434\u043e HTCN39WW (Lenovo V14 G2 IJL), \u0434\u043e HTCN39WW (Lenovo V15 G2 IJL Laptop), \u0434\u043e KUCN33WW (Lenovo V15 G4 IAN), \u0434\u043e HMCN48WW (Yoga Slim 7 ProX 14IAH7), \u0434\u043e JLCN37WW (IdeaPad 5 14IAL7), \u0434\u043e J5CN34WW (IdeaPad 5 Pro 16IAH7), \u0434\u043e JXCN48WW (IdeaPad Duet 5 12IAU7), \u0434\u043e M7CN20WW (IdeaPad Duet 5 12IRU8), \u0434\u043e JMCN45WW (IdeaPad Gaming 3 15IAH7 Laptop), \u0434\u043e JMCN45WW (IdeaPad Gaming 3 16IAH7), \u0434\u043e LJCN29WW (IdeaPad Pro 5 14IRH8), \u0434\u043e LGCN28WW (Lenovo Slim 7 14IRP8), \u0434\u043e KMCN20WW (Slim 7 16IAH7 Laptop), \u0434\u043e HYCN48WW (ThinkBook 14 G4+ IAP Laptop), \u0434\u043e HYCN48WW (ThinkBook 16 G4+ IAP Laptop), \u0434\u043e LHCN22WW (Yoga 7 14IRL8), \u0434\u043e LHCN22WW (Yoga 7 16IRL8), \u0434\u043e KXCN36WW (Yoga Book 9 13IRU8), \u0434\u043e LWCN26WW (Yoga Pro 7 14IRH8), \u0434\u043e KTCN41WW (Yoga Slim 6 14IAP8), \u0434\u043e LGCN28WW (Yoga Slim 6 14IRP8), \u0434\u043e KMCN20WW (Yoga Slim 7 Pro 16IAH7 Laptop), \u0434\u043e J3CN55WW (Yoga Slim 9 14IAP7), \u0434\u043e LACN31WW (IdeaPad Slim 5 14IAH8), \u0434\u043e L9CN24WW (IdeaPad Slim 5 16ABR8), \u0434\u043e LACN31WW (IdeaPad Slim 5 16IAH8), \u0434\u043e K3CN24WW (IdeaPad 5 14ABA7), \u0434\u043e J8CN37WW (IdeaPad 5 Pro 14ARH7), \u0434\u043e J0CN40WW (IdeaPad 5 Pro 14IAP7), \u0434\u043e J4CN40WW (IdeaPad 5 Pro 16ARH7), \u0434\u043e GECN37WW (ideapad 5 Pro-14ACN6), \u0434\u043e GDCN68WW (ideapad 5 Pro-14ITL6), \u0434\u043e GSCN39WW (ideapad 5 Pro-16ACH6), \u0434\u043e GRCN29WW (ideapad 5 Pro-16IHU6), \u0434\u043e G5CN69WW (ideapad 5-14ALC05), \u0434\u043e FKCN50WW (IdeaPad 5-14ITL05), \u0434\u043e GSCN39WW (ideapad Creator 5-16ACH6), \u0434\u043e JNCN50WW (IdeaPad Gaming 3 15ARH7), \u0434\u043e JNCN50WW (IdeaPad Gaming 3 16ARH7), \u0434\u043e H3CN46WW (ideapad Gaming 3-15ACH6), \u0434\u043e H4CN34WW (IdeaPad Gaming 3-15IHU6), \u0434\u043e MKCN31WW (IdeaPad Pro 5 14APH8), \u0434\u043e JWCN22WW (IdeaPad Pro 5 14ARP8), \u0434\u043e L9CN24WW (IdeaPad Slim 5 14ABR8), \u0434\u043e LACN31WW (IdeaPad Slim 5 14IRL8), \u0434\u043e LACN31WW (IdeaPad Slim 5 16IRL8), \u0434\u043e M0CN35WW (Legion S7 16IRH8), \u0434\u043e M3CN42WW (Legion Slim 5 16APH8), \u0434\u043e M2CN31WW (Legion Slim 5 16IRH8), \u0434\u043e KLCN21WW (Slim 7 16ARH7), \u0434\u043e LNCN21WW (Lenovo Slim Pro 7 14ARP8), \u0434\u043e LYCN41WW (LOQ 15APH8), \u0434\u043e LZCN34WW (LOQ 15IRH8), \u0434\u043e LYCN41WW (LOQ 16APH8), \u0434\u043e LZCN34WW (LOQ 16IRH8), \u0434\u043e HUCN20WW (Slim 7 Pro 16ACH6 Laptop), \u0434\u043e HLCN35WW (ThinkBook 13x ITG), \u0434\u043e F8CN57WW (ThinkBook 14 G2 ITL Laptop), \u0434\u043e GQCN43WW (ThinkBook 14 G3 ACL), \u0434\u043e HRCN18WW (ThinkBook 14 G3 ITL), \u0434\u043e JPCN27WW (ThinkBook 14 G4 ABA Laptop), \u0434\u043e J6CN48WW (ThinkBook 14 G4+ ARA), \u0434\u043e LMCN20WW (ThinkBook 14 G5 ABP), \u0434\u043e LVCN21WW (ThinkBook 14 G5 IRL), \u0434\u043e LVCN21WW (ThinkBook 14s Yoga G3 IRU), \u0434\u043e FNCN45WW (ThinkBook 14s Yoga ITL), \u0434\u043e F8CN57WW (ThinkBook 15 G2 ITL Laptop), \u0434\u043e GQCN43WW (ThinkBook 15 G3 ACL), \u0434\u043e HRCN18WW (ThinkBook 15 G3 ITL Laptop), \u0434\u043e JPCN27WW (ThinkBook 15 G4 ABA Laptop), \u0434\u043e LMCN20WW (ThinkBook 15 G5 ABP), \u0434\u043e LVCN21WW (ThinkBook 15 G5 IRL), \u0434\u043e J6CN48WW (ThinkBook 16 G4+ ARA), \u0434\u043e KJCN33WW (ThinkBook 16p NX ARH), \u0434\u043e GYCN37WW (ThinkBook Plus G2 ITG), \u0434\u043e K6CN34WW (ThinkBook Plus G3 IAP), \u0434\u043e L5CN19WW (Yoga 6 13ABR8), \u0434\u043e JECN22WW (Yoga 6 13ALC7), \u0434\u043e H6CN21WW (Yoga 6-13ALC6), \u0434\u043e LCCN20WW (Yoga 7 14ARP8), \u0434\u043e LCCN20WW (Yoga 7 16ARP8), \u0434\u043e GPCN28WW (Yoga Duet 7-13ITL6-LTE), \u0434\u043e GPCN28WW (Yoga Duet 7-13ITL6), \u0434\u043e LNCN21WW (Yoga Pro 7 14ARP8), \u0434\u043e H5CN42WW (Yoga Slim 7 Carbon-14ACN06), \u0434\u043e HUCN20WW (Yoga Slim 7 Pro 16ACH6 Laptop), \u0434\u043e KLCN21WW (Yoga Slim 7 Pro 16ARH7), \u0434\u043e GHCN32WW (Yoga Slim 7-13ACN05 Laptop), \u043e\u0442 5.2 \u0434\u043e 05.28.42 (InsydeH2O), \u043e\u0442 5.3 \u0434\u043e 05.37.42 (InsydeH2O), \u043e\u0442 5.4 \u0434\u043e 05.45.39 (InsydeH2O), \u043e\u0442 5.5 \u0434\u043e 05.53.39 (InsydeH2O), \u043e\u0442 5.6 \u0434\u043e 05.60.39 (InsydeH2O), \u0434\u043e 3.00.21.00 (H2OFFT Client), \u0434\u043e 3.00.11.00 (H2OFFT Client), \u0434\u043e 200.02.00.08 (H2OFFT Server), \u0434\u043e 200.02.00.13 (H2OUVE), \u0434\u043e 200.02.00.03 (H2OOAE)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f Insyde:\nhttps://www.insyde.com/security-pledge/SA-2023040\n\n\u0414\u043b\u044f Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "12.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "23.06.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "23.06.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-07345",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-28149, LEN-155477, INSYDE-SA-2023040",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "IdeaPad Duet 3 10IGL5, IdeaPad Duet 3 11IAN8, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 7 16IAX7, Lenovo Slim 7 ProX 14IAH7, Lenovo Slim 9 14IAP7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, Yoga Slim 7 ProX 14IAH7, IdeaPad 5 14IAL7, IdeaPad 5 Pro 16IAH7, IdeaPad Duet 5 12IAU7, IdeaPad Duet 5 12IRU8, IdeaPad Gaming 3 15IAH7 Laptop, IdeaPad Gaming 3 16IAH7, IdeaPad Pro 5 14IRH8, Lenovo Slim 7 14IRP8, Slim 7 16IAH7 Laptop, ThinkBook 14 G4+ IAP Laptop, ThinkBook 16 G4+ IAP Laptop, Yoga 7 14IRL8, Yoga 7 16IRL8, Yoga Book 9 13IRU8, Yoga Pro 7 14IRH8, Yoga Slim 6 14IAP8, Yoga Slim 6 14IRP8, Yoga Slim 7 Pro 16IAH7 Laptop, Yoga Slim 9 14IAP7, IdeaPad Slim 5 14IAH8, IdeaPad Slim 5 16ABR8, IdeaPad Slim 5 16IAH8, IdeaPad 5 14ABA7, IdeaPad 5 Pro 14ARH7, IdeaPad 5 Pro 14IAP7, IdeaPad 5 Pro 16ARH7, ideapad 5 Pro-14ACN6, ideapad 5 Pro-14ITL6, ideapad 5 Pro-16ACH6, ideapad 5 Pro-16IHU6, ideapad 5-14ALC05, IdeaPad 5-14ITL05, ideapad Creator 5-16ACH6, IdeaPad Gaming 3 15ARH7, IdeaPad Gaming 3 16ARH7, ideapad Gaming 3-15ACH6, IdeaPad Gaming 3-15IHU6, IdeaPad Pro 5 14APH8, IdeaPad Pro 5 14ARP8, IdeaPad Slim 5 14ABR8, IdeaPad Slim 5 14IRL8, IdeaPad Slim 5 16IRL8, Legion S7 16IRH8, Legion Slim 5 16APH8, Legion Slim 5 16IRH8, Slim 7 16ARH7, Lenovo Slim Pro 7 14ARP8, LOQ 15APH8, LOQ 15IRH8, LOQ 16APH8, LOQ 16IRH8, Slim 7 Pro 16ACH6 Laptop, ThinkBook 13x ITG, ThinkBook 14 G2 ITL Laptop, ThinkBook 14 G3 ACL, ThinkBook 14 G3 ITL, ThinkBook 14 G4 ABA Laptop, ThinkBook 14 G4+ ARA, ThinkBook 14 G5 ABP, ThinkBook 14 G5 IRL, ThinkBook 14s Yoga G3 IRU, ThinkBook 14s Yoga ITL, ThinkBook 15 G2 ITL Laptop, ThinkBook 15 G3 ACL, ThinkBook 15 G3 ITL Laptop, ThinkBook 15 G4 ABA Laptop, ThinkBook 15 G5 ABP, ThinkBook 15 G5 IRL, ThinkBook 16 G4+ ARA, ThinkBook 16p NX ARH, ThinkBook Plus G2 ITG, ThinkBook Plus G3 IAP, Yoga 6 13ABR8, Yoga 6 13ALC7, Yoga 6-13ALC6, Yoga 7 14ARP8, Yoga 7 16ARP8, Yoga Duet 7-13ITL6-LTE, Yoga Duet 7-13ITL6, Yoga Pro 7 14ARP8, Yoga Slim 7 Carbon-14ACN06, Yoga Slim 7 Pro 16ACH6 Laptop, Yoga Slim 7 Pro 16ARH7, Yoga Slim 7-13ACN05 Laptop, InsydeH2O, H2OFFT Client, H2OFFT Server, H2OUVE, H2OOAE",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 IhisiServiceSmm \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a InsydeH2O, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0417\u0430\u043f\u0438\u0441\u044c \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 (CWE-787)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430 IhisiServiceSmm \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a InsydeH2O \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u0437\u0430 \u0433\u0440\u0430\u043d\u0438\u0446\u0430\u043c\u0438 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.insyde.com/security-pledge/SA-2023040\nhttps://support.lenovo.com/us/en/product_security/LEN-155477",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u043e\u0435 \u041f\u041e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-787",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 4,4)\n\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,1)"
}

CVE-2023-28149 (GCVE-0-2023-28149)

Vulnerability from cvelistv5 – Published: 2024-07-31 00:00 – Updated: 2024-11-07 16:49

Summary

An issue was discovered in the IhisiServiceSmm module in Insyde InsydeH2O with kernel 5.2 before 05.28.42, 5.3 before 05.37.42, 5.4 before 05.45.39, 5.5 before 05.53.39, and 5.6 before 05.60.39 that could allow an attacker to modify UEFI variables.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-08-01 15:41 UTC

CWE

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://www.insyde.com/security-pledge/SA-2023040

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "LOCAL",
              "availabilityImpact": "LOW",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "CHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-28149",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-08-01T15:41:16.092905Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-07T16:49:18.289Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in the IhisiServiceSmm module in Insyde InsydeH2O with kernel 5.2 before 05.28.42, 5.3 before 05.37.42, 5.4 before 05.45.39, 5.5 before 05.53.39, and 5.6 before 05.60.39 that could allow an attacker to modify UEFI variables."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-07-31T18:48:05.366Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "url": "https://www.insyde.com/security-pledge/SA-2023040"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2023-28149",
    "datePublished": "2024-07-31T00:00:00.000Z",
    "dateReserved": "2023-03-12T00:00:00.000Z",
    "dateUpdated": "2024-11-07T16:49:18.289Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.