CVE-2023-43569: Lenovo Ideacentre 3-07ada05 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. 

Affected products

  • Lenovo Ideacentre 3-07ada05 Firmware: before o4fkt39a (fixed in o4fkt39a)
  • Lenovo Ideacentre 3-07imb05 Firmware: before m2vkt21a (fixed in m2vkt21a)
  • Lenovo Ideacentre 5-14acn6 Firmware: affected versions not specified
  • Lenovo Ideacentre 5-14imb05 Firmware: before o4hkt3ca (fixed in o4hkt3ca)
  • Lenovo Ideacentre 5-14iob6 Firmware: before m3gkt3da (fixed in m3gkt3da)
  • Lenovo Ideacentre 5 14iab7 Firmware: before m42kt46a (fixed in m42kt46a)
  • Lenovo Ideacentre 5 14irb8 Firmware: before m4ukt36a (fixed in m4ukt36a)
  • Lenovo Ideacentre Aio 3-22iil5 Firmware: before o56kt24a (fixed in o56kt24a)
  • Lenovo Ideacentre Aio 3-22imb05 Firmware: before o4rkt31a (fixed in o4rkt31a)
  • Lenovo Ideacentre Aio 3-22itl6 Firmware: before o5akt34a (fixed in o5akt34a)
  • Lenovo Ideacentre Aio 3-24alc6 Firmware: before o5bkt25a (fixed in o5bkt25a)
  • Lenovo Ideacentre Aio 3-24iil5 Firmware: before o56kt24a (fixed in o56kt24a)
  • Lenovo Ideacentre Aio 3-24imb05 Firmware: before o4rkt31a (fixed in o4rkt31a)
  • Lenovo Ideacentre Aio 3-24itl6 Firmware: before o5akt34a (fixed in o5akt34a)
  • Lenovo Ideacentre Aio 3-27imb05 Firmware: before o4rkt31a (fixed in o4rkt31a)
  • Lenovo Ideacentre Aio 3-27itl6 Firmware: before o5akt34a (fixed in o5akt34a)
  • Lenovo Ideacentre Aio 3 21itl7 Firmware: before o5akt34a (fixed in o5akt34a)
  • Lenovo Ideacentre Aio 3 22iap7 Firmware: before o5nkt33a (fixed in o5nkt33a)
  • Lenovo Ideacentre Aio 3 24iap7 Firmware: before o5nkt33a (fixed in o5nkt33a)
  • Lenovo Ideacentre Aio 3 27iap7 Firmware: before o5nkt33a (fixed in o5nkt33a)
  • Lenovo Ideacentre Aio 5 24iah7 Firmware: before o5rkt41a (fixed in o5rkt41a)
  • Lenovo Ideacentre Aio 5 27iah7 Firmware: before o5rkt41a (fixed in o5rkt41a)
  • Lenovo Ideacentre c5-14imb05 Firmware: before o4hkt3ca (fixed in o4hkt3ca)
  • Lenovo Ideacentre Creator 5-14iob6 Firmware: before m3gkt3da (fixed in m3gkt3da)
  • Lenovo Ideacentre g5-14amr05 Firmware: before o4zkt2ba (fixed in o4zkt2ba)
  • and 86 more

Published 2023-11-08. Last modified 2026-06-17.