CVE-2023-34419

Published Aug 17, 2023 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

Remediation

Vendor Solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-134879.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-38496 A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
History

No history.

Subscriptions

Lenovo Legion 5-15ach6 Legion 5-15ach6 Firmware Legion 5-15ach6a Legion 5-15ach6a Firmware Legion 5-15ach6h Legion 5-15ach6h Firmware Legion 5-15ith6 Legion 5-15ith6 Firmware Legion 5-15ith6h Legion 5-15ith6h Firmware Legion 5-17ach6 Legion 5-17ach6 Firmware Legion 5-17ach6h Legion 5-17ach6h Firmware Legion 5-17ith6 Legion 5-17ith6 Firmware Legion 5-17ith6h Legion 5-17ith6h Firmware Legion 5 15arh7 Legion 5 15arh7 Firmware Legion 5 15arh7h Legion 5 15arh7h Firmware Legion 5 15iah7 Legion 5 15iah7 Firmware Legion 5 15iah7h Legion 5 15iah7h Firmware Legion 5 Pro-16ach6 Legion 5 Pro-16ach6 Firmware Legion 5 Pro-16ach6h Legion 5 Pro-16ach6h Firmware Legion 5 Pro-16ith6 Legion 5 Pro-16ith6 Firmware Legion 5 Pro-16ith6h Legion 5 Pro-16ith6h Firmware Legion 5 Pro 16arh7 Legion 5 Pro 16arh7 Firmware Legion 5 Pro 16arh7h Legion 5 Pro 16arh7h Firmware Legion 5 Pro 16iah7 Legion 5 Pro 16iah7 Firmware Legion 5 Pro 16iah7h Legion 5 Pro 16iah7h Firmware Legion 7-16achg6 Legion 7-16achg6 Firmware Legion 7-16arha7 Legion 7-16arha7 Firmware Legion 7-16ithg6 Legion 7-16ithg6 Firmware Legion Pro 5 16irx8 Legion Pro 5 16irx8 Firmware Legion Pro 7 16irx8 Legion Pro 7 16irx8 Firmware Legion Pro 7 16irx8h Legion Pro 7 16irx8h Firmware Legion S7 16arha7 Legion S7 16arha7 Firmware Thinkbook 15p G2 Ith Thinkbook 15p G2 Ith Firmware Thinkbook 16p G3 Arh Thinkbook 16p G3 Arh Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
lenovo
Published
Updated
Aug 2, 2024, 4:10 PM
Reserved
Jun 5, 2023, 7:15 PM
Status
Modified
Published
Aug 17, 2023, 5:15 PM
Modified
Jun 17, 2026, 6:03 AM