A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Project Subscriptions
| Vendors | Products |
|---|---|
|
Lenovo
Subscribe
|
Legion 5-15ach6
Subscribe
Legion 5-15ach6 Firmware
Subscribe
Legion 5-15ach6a
Subscribe
Legion 5-15ach6a Firmware
Subscribe
Legion 5-15ach6h
Subscribe
Legion 5-15ach6h Firmware
Subscribe
Legion 5-15ith6
Subscribe
Legion 5-15ith6 Firmware
Subscribe
Legion 5-15ith6h
Subscribe
Legion 5-15ith6h Firmware
Subscribe
Legion 5-17ach6
Subscribe
Legion 5-17ach6 Firmware
Subscribe
Legion 5-17ach6h
Subscribe
Legion 5-17ach6h Firmware
Subscribe
Legion 5-17ith6
Subscribe
Legion 5-17ith6 Firmware
Subscribe
Legion 5-17ith6h
Subscribe
Legion 5-17ith6h Firmware
Subscribe
Legion 5 15arh7
Subscribe
Legion 5 15arh7 Firmware
Subscribe
Legion 5 15arh7h
Subscribe
Legion 5 15arh7h Firmware
Subscribe
Legion 5 15iah7
Subscribe
Legion 5 15iah7 Firmware
Subscribe
Legion 5 15iah7h
Subscribe
Legion 5 15iah7h Firmware
Subscribe
Legion 5 Pro-16ach6
Subscribe
Legion 5 Pro-16ach6 Firmware
Subscribe
Legion 5 Pro-16ach6h
Subscribe
Legion 5 Pro-16ach6h Firmware
Subscribe
Legion 5 Pro-16ith6
Subscribe
Legion 5 Pro-16ith6 Firmware
Subscribe
Legion 5 Pro-16ith6h
Subscribe
Legion 5 Pro-16ith6h Firmware
Subscribe
Legion 5 Pro 16arh7
Subscribe
Legion 5 Pro 16arh7 Firmware
Subscribe
Legion 5 Pro 16arh7h
Subscribe
Legion 5 Pro 16arh7h Firmware
Subscribe
Legion 5 Pro 16iah7
Subscribe
Legion 5 Pro 16iah7 Firmware
Subscribe
Legion 5 Pro 16iah7h
Subscribe
Legion 5 Pro 16iah7h Firmware
Subscribe
Legion 7-16achg6
Subscribe
Legion 7-16achg6 Firmware
Subscribe
Legion 7-16arha7
Subscribe
Legion 7-16arha7 Firmware
Subscribe
Legion 7-16ithg6
Subscribe
Legion 7-16ithg6 Firmware
Subscribe
Legion Pro 5 16irx8
Subscribe
Legion Pro 5 16irx8 Firmware
Subscribe
Legion Pro 7 16irx8
Subscribe
Legion Pro 7 16irx8 Firmware
Subscribe
Legion Pro 7 16irx8h
Subscribe
Legion Pro 7 16irx8h Firmware
Subscribe
Legion S7 16arha7
Subscribe
Legion S7 16arha7 Firmware
Subscribe
Thinkbook 15p G2 Ith
Subscribe
Thinkbook 15p G2 Ith Firmware
Subscribe
Thinkbook 16p G3 Arh
Subscribe
Thinkbook 16p G3 Arh Firmware
Subscribe
|
Advisories
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2023-38496 | A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code. |
Fixes
Solution
Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-134879.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://support.lenovo.com/us/en/product_security/LEN-134879 |
|
History
No history.
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: lenovo
Published:
Updated: 2024-08-02T16:10:06.823Z
Reserved: 2023-06-05T19:15:31.605Z
Link: CVE-2023-34419
No data.
Status : Modified
Published: 2023-08-17T17:15:09.913
Modified: 2024-11-21T08:07:12.007
Link: CVE-2023-34419
No data.
OpenCVE Enrichment
No data.
Weaknesses
EUVD