Description
A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2023-08-17
Score: 6.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

Vendor Solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-134879.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-38496 A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
History

No history.

Subscriptions

Lenovo Legion 5-15ach6 Legion 5-15ach6 Firmware Legion 5-15ach6a Legion 5-15ach6a Firmware Legion 5-15ach6h Legion 5-15ach6h Firmware Legion 5-15ith6 Legion 5-15ith6 Firmware Legion 5-15ith6h Legion 5-15ith6h Firmware Legion 5-17ach6 Legion 5-17ach6 Firmware Legion 5-17ach6h Legion 5-17ach6h Firmware Legion 5-17ith6 Legion 5-17ith6 Firmware Legion 5-17ith6h Legion 5-17ith6h Firmware Legion 5 15arh7 Legion 5 15arh7 Firmware Legion 5 15arh7h Legion 5 15arh7h Firmware Legion 5 15iah7 Legion 5 15iah7 Firmware Legion 5 15iah7h Legion 5 15iah7h Firmware Legion 5 Pro-16ach6 Legion 5 Pro-16ach6 Firmware Legion 5 Pro-16ach6h Legion 5 Pro-16ach6h Firmware Legion 5 Pro-16ith6 Legion 5 Pro-16ith6 Firmware Legion 5 Pro-16ith6h Legion 5 Pro-16ith6h Firmware Legion 5 Pro 16arh7 Legion 5 Pro 16arh7 Firmware Legion 5 Pro 16arh7h Legion 5 Pro 16arh7h Firmware Legion 5 Pro 16iah7 Legion 5 Pro 16iah7 Firmware Legion 5 Pro 16iah7h Legion 5 Pro 16iah7h Firmware Legion 7-16achg6 Legion 7-16achg6 Firmware Legion 7-16arha7 Legion 7-16arha7 Firmware Legion 7-16ithg6 Legion 7-16ithg6 Firmware Legion Pro 5 16irx8 Legion Pro 5 16irx8 Firmware Legion Pro 7 16irx8 Legion Pro 7 16irx8 Firmware Legion Pro 7 16irx8h Legion Pro 7 16irx8h Firmware Legion S7 16arha7 Legion S7 16arha7 Firmware Thinkbook 15p G2 Ith Thinkbook 15p G2 Ith Firmware Thinkbook 16p G3 Arh Thinkbook 16p G3 Arh Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-08-02T16:10:06.823Z

Reserved: 2023-06-05T19:15:31.605Z

Link: CVE-2023-34419

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-08-17T17:15:09.913

Modified: 2024-11-21T08:07:12.007

Link: CVE-2023-34419

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses