VULNERABILITY INTELLIGENCE

CVE-2023-4028

CVSS score6.7 MEDIUM
EPSS probability0.19%
CISA KEVNot currently listed
Published2023-08-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

Weakness classification

  • psirt@lenovo.com: CWE-120
  • nvd@nist.gov: CWE-120

Primary references