VULNERABILITY INTELLIGENCE

CVE-2023-3078

CVSS score7.8 HIGH
EPSS probability0.22%
CISA KEVNot currently listed
Published2023-08-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.

Weakness classification

  • psirt@lenovo.com: CWE-427

Primary references