CVE-2023-4028

Published Aug 17, 2023 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

Remediation

Vendor Solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-134879.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-53921 A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
History
Type Values Removed Values Added
First Time appeared Lenovo flex 7 14iau7 Firmware
Lenovo ideapad 5-14alc05
Lenovo ideapad 5-15alc05
CPEs cpe:2.3:h:lenovo:ideapad_5-14alc05:-:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:ideapad_5-15alc05:-:*:*:*:*:*:*:*
cpe:2.3:o:lenovo:flex_7_14iau7_firmware:*:*:*:*:*:*:*:*
Vendors & Products Lenovo flex 7 14iau7 Firmware
Lenovo ideapad 5-14alc05
Lenovo ideapad 5-15alc05
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Lenovo 13w Yoga 13w Yoga Firmware 13w Yoga Gen 2 13w Yoga Gen 2 Firmware Flex 5-14alc05 Flex 5-14alc05 Firmware Flex 5-14are05 Flex 5-14are05 Firmware Flex 5-14iil05 Flex 5-14iil05 Firmware Flex 5-14itl05 Flex 5-14itl05 Firmware Flex 5-15alc05 Flex 5-15alc05 Firmware Flex 5-15iil05 Flex 5-15iil05 Firmware Flex 5-15itl05 Flex 5-15itl05 Firmware Flex 7 14iau7 Firmware Flex 7 14iru8 Flex 7 14iru8 Firmware Ideapad 1-11ada05 Ideapad 1-11ada05 Firmware Ideapad 1-11igl05 Ideapad 1-11igl05 Firmware Ideapad 1-14ada05 Ideapad 1-14ada05 Firmware Ideapad 1-14igl05 Ideapad 1-14igl05 Firmware Ideapad 5-14alc05 Ideapad 5-15alc05 Ideapad Flex 5 14abr8 Ideapad Flex 5 14abr8 Firmware Ideapad Flex 5 14alc7 Ideapad Flex 5 14alc7 Firmware Ideapad Flex 5 14iau7 Ideapad Flex 5 14iau7 Firmware Ideapad Flex 5 14iru8 Ideapad Flex 5 14iru8 Firmware Ideapad Flex 5 16abr8 Ideapad Flex 5 16abr8 Firmware Ideapad Flex 5 16alc7 Ideapad Flex 5 16alc7 Firmware Ideapad Flex 5 16iau7 Ideapad Flex 5 16iau7 Firmware Ideapad Flex 5 16iru8 Ideapad Flex 5 16iru8 Firmware Thinkbook 13s G2 Are Thinkbook 13s G2 Are Firmware Thinkbook 13s G2 Itl Thinkbook 13s G2 Itl Firmware Thinkbook 13s G3 Acn Thinkbook 13s G3 Acn Firmware Thinkbook 13s G4 Iap Thinkbook 13s G4 Iap Firmware Thinkbook 13x G2 Iap Thinkbook 13x G2 Iap Firmware Thinkbook 14s G2 Itl Thinkbook 14s G2 Itl Firmware Yoga 9-15imh5 Yoga 9-15imh5 Firmware
Weaknesses

Sources

Status
PUBLISHED
Assigner
lenovo
Published
Updated
Oct 8, 2024, 1:50 PM
Reserved
Jul 31, 2023, 4:44 PM
Status
Modified
Published
Aug 17, 2023, 5:15 PM
Modified
Jun 17, 2026, 6:36 AM