VULNERABILITY INTELLIGENCE
CVE-2023-34419
CVSS score6.7 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2023-08-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Weakness classification
- psirt@lenovo.com: CWE-120
Primary references
- psirt@lenovo.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory