Log in Start free

Vulnerability · Published Sep 13, 2024 · Assigned by lenovo

CVE-2024-3100

Medium 6.7

In plain English

A medium-severity stack buffer overflow in 100w Gen 3 Laptop (Lenovo) BIOS from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).

Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)0.2%top 93.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A potential buffer overflow vulnerability was reported in some Lenovo Notebook products that could allow a local attacker with elevated privileges to execute arbitrary code.

Affected products (as reported)

VendorProductVersions
Lenovo 100w Gen 3 Laptop (Lenovo) BIOS 0 – before GACN48WW
Lenovo 100w Gen 4 Laptop (Lenovo) BIOS 0 – before L2CN34WW/L3CN34WW
Lenovo 13w Yoga (Type 82S1, 82S2) Laptop (Lenovo) BIOS 0 – before JACN41WW
Lenovo 13w Yoga Gen 2 (Type 82YR, 82YS) Laptop (Lenovo) BIOS 0 – before KBCN29WW
Lenovo 14W Gen 2 Laptop (Lenovo) BIOS 0 – before H0CN29WW
Lenovo 300w Gen 3 Laptop (Lenovo) BIOS 0 – before GACN48WW
Lenovo 300w Yoga Gen 4 Laptop (Lenovo) BIOS 0 – before L2CN34WW/L3CN34WW
Lenovo 500w Yoga Gen 4 Laptop (Lenovo) BIOS 0 – before L2CN34WW/L3CN34WW
Lenovo Flex 5-14ITL05 Laptop (ideapad) BIOS 0 – before FXCN47WW
Lenovo Flex 5-15ITL05 Laptop (ideapad) BIOS 0 – before FXCN47WW
Lenovo IdeaPad 1 14ALC7 Laptop BIOS 0 – before JTCN54WW
Lenovo IdeaPad 1 15ALC7 Laptop BIOS 0 – before JTCN54WW
Lenovo IdeaPad 1-11IGL05 Laptop BIOS 0 – before DWCN31WW
Lenovo IdeaPad 1-14IGL05 Laptop BIOS 0 – before DWCN31WW
Lenovo IdeaPad 3 14ABA7 Laptop BIOS 0 – before JTCN54WW
Lenovo IdeaPad 3 15ABA7 Laptop BIOS 0 – before JTCN54WW
Lenovo IdeaPad 3 17ABA7 Laptop BIOS 0 – before JTCN54WW
Lenovo IdeaPad 3-14ALC6 Laptop BIOS 0 – through GLCN63WW
Lenovo IdeaPad 3-15ALC6 Laptop BIOS 0 – through GLCN63WW
Lenovo IdeaPad 3-17ALC6 Laptop BIOS 0 – through GLCN63WW
Lenovo ideapad 5-15ALC05 Laptop BIOS 0 – before H2CN35WW
Lenovo IdeaPad Flex 5 14ABR8 BIOS 0 – before L7CN21WW
Lenovo IdeaPad Flex 5 14ALC7 Laptop BIOS 0 – before JCCN40WW
Lenovo IdeaPad Flex 5 14IAU7 Laptop BIOS 0 – before J7CN48WW
Lenovo IdeaPad Flex 5 14IRU8 BIOS 0 – before L6CN24WW
Lenovo IdeaPad Flex 5 16ABR8 BIOS 0 – before L7CN21WW
Lenovo IdeaPad Flex 5 16ALC7 BIOS 0 – before JCCN40WW
Lenovo IdeaPad Flex 5 16IAU7 BIOS 0 – before J7CN48WW
Lenovo IdeaPad Flex 5 16IRU8 BIOS 0 – before L6CN24WW
Lenovo IdeaPad Slim 3 14ABR8 BIOS 0 – through KYCN32WW

Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References