CVE-2023-45078: Lenovo Ideacentre 3-07ada05 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.

Affected products

  • Lenovo Ideacentre 3-07ada05 Firmware: before o4fkt39a (fixed in o4fkt39a)
  • Lenovo Ideacentre 3-07imb05 Firmware: before m2vkt21a (fixed in m2vkt21a)
  • Lenovo Ideacentre 5-14iob6 Firmware: before m3gkt3da (fixed in m3gkt3da)
  • Lenovo Ideacentre c5-14imb05 Firmware: before o4hkt3ca (fixed in o4hkt3ca)
  • Lenovo Ideacentre Creator 5-14iob6 Firmware: before m3gkt3da (fixed in m3gkt3da)
  • Lenovo Ideacentre g5-14amr05 Firmware: before o4zkt2ba (fixed in o4zkt2ba)
  • Lenovo Ideacentre g5-14imb05 Firmware: before o4hkt3ca (fixed in o4hkt3ca)
  • Lenovo Ideacentre Gaming 5-14iob6 Firmware: before m3gkt3da (fixed in m3gkt3da)
  • Lenovo Ideacentre Mini 5-01imh05 Firmware: before o4ekt1ba (fixed in o4ekt1ba)
  • Lenovo Ideacentre Mini 5 01iaq7 Firmware: before o53kt10a (fixed in o53kt10a)
  • Lenovo Legion t7-34imz5 Firmware: before o5fkt17a (fixed in o5fkt17a)
  • Lenovo Thinkcentre m625q Firmware: before m1wkt52a (fixed in m1wkt52a)
  • Lenovo Thinkcentre m630e Firmware: affected versions not specified
  • Lenovo Thinkcentre m70a Firmware: before m2skt29a (fixed in m2skt29a)
  • Lenovo Thinkcentre m70c Firmware: before m2vkt21a (fixed in m2vkt21a)
  • Lenovo Thinkcentre m70q Firmware: before m2wkt5aa (fixed in m2wkt5aa)
  • Lenovo Thinkcentre m70s Firmware: before m2tkt55a (fixed in m2tkt55a)
  • Lenovo Thinkcentre m70t Firmware: before m2tkt55a (fixed in m2tkt55a)
  • Lenovo Thinkcentre m720q Firmware: before m1ukt72a (fixed in m1ukt72a)
  • Lenovo Thinkcentre m720s Firmware: before m1ukt72a (fixed in m1ukt72a)
  • Lenovo Thinkcentre m720t Firmware: before m1ukt72a (fixed in m1ukt72a)
  • Lenovo Thinkcentre m75n Firmware: before m33kt27a (fixed in m33kt27a)
  • Lenovo Thinkcentre m75q Gen 2 Firmware: before m47kt30a (fixed in m47kt30a)
  • Lenovo Thinkcentre m75s Gen 2 Firmware: affected versions not specified
  • Lenovo Thinkcentre m75t Gen 2 Firmware: affected versions not specified
  • and 36 more

Published 2023-11-08. Last modified 2026-06-17.