The vulnerability is a divide‑by‑zero condition in the Lenovo Virtual Bus driver used by Smart Connect. The flaw allows a local authenticated user to trigger a Windows blue‑screen error, effectively crashing the system. This falls under CWE‑369, indicating a mathematical error that can be exploited by users with legitimate local credentials.

The affected product is Lenovo Smart Connect, which runs on Windows. No specific build or revision numbers are listed in the CNA data; the CVE indicates that any installation of Smart Connect that includes the Lenovo Virtual Bus driver may be vulnerable. The vendor recommends updating to version 09.0.1.002.000, which resolves the issue.

The CVSS base score is 6.8, indicating a medium severity vulnerability. The EPSS score is less than 1%, suggesting low likelihood of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog. Attackers require local authenticated access; once authenticated, they can trigger a blue‑screen crash by exercising the divide‑by‑zero condition. The impact is a denial of service that disrupts system availability, but there is no evidence of privilege escalation or data theft. Given the low EPSS, the immediate risk is moderate, but organizations should address it promptly to prevent potential local denial of service incidents.