CVE Feed

    Dashboard / CVE / CVE-2023-34419

    CVE-2023-34419

    A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

    Published:Aug 17, 2023
    Last Modified:Nov 21, 2024
    EPS:Aug 17, 2023
    EPSS Score:0.00037
    CVSS Score:6.7

    Affected Products

    Vendor
    Lenovo
    Product
    Legion 5-15ach6
    Vendor
    Lenovo
    Product
    Legion 5-15ach6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15ach6a
    Vendor
    Lenovo
    Product
    Legion 5-15ach6a Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15ach6h
    Vendor
    Lenovo
    Product
    Legion 5-15ach6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15ith6
    Vendor
    Lenovo
    Product
    Legion 5-15ith6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-15ith6h
    Vendor
    Lenovo
    Product
    Legion 5-15ith6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5-17ach6
    Vendor
    Lenovo
    Product
    Legion 5-17ach6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-17ach6h
    Vendor
    Lenovo
    Product
    Legion 5-17ach6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5-17ith6
    Vendor
    Lenovo
    Product
    Legion 5-17ith6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5-17ith6h
    Vendor
    Lenovo
    Product
    Legion 5-17ith6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5 15arh7
    Vendor
    Lenovo
    Product
    Legion 5 15arh7 Firmware
    Vendor
    Lenovo
    Product
    Legion 5 15arh7h
    Vendor
    Lenovo
    Product
    Legion 5 15arh7h Firmware
    Vendor
    Lenovo
    Product
    Legion 5 15iah7
    Vendor
    Lenovo
    Product
    Legion 5 15iah7 Firmware
    Vendor
    Lenovo
    Product
    Legion 5 15iah7h
    Vendor
    Lenovo
    Product
    Legion 5 15iah7h Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ach6
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ach6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ach6h
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ach6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ith6
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ith6 Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ith6h
    Vendor
    Lenovo
    Product
    Legion 5 Pro-16ith6h Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro 16arh7
    Vendor
    Lenovo
    Product
    Legion 5 Pro 16arh7 Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro 16arh7h
    Vendor
    Lenovo
    Product
    Legion 5 Pro 16arh7h Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro 16iah7
    Vendor
    Lenovo
    Product
    Legion 5 Pro 16iah7 Firmware
    Vendor
    Lenovo
    Product
    Legion 5 Pro 16iah7h
    Vendor
    Lenovo
    Product
    Legion 5 Pro 16iah7h Firmware
    Vendor
    Lenovo
    Product
    Legion 7-16achg6
    Vendor
    Lenovo
    Product
    Legion 7-16achg6 Firmware
    Vendor
    Lenovo
    Product
    Legion 7-16arha7
    Vendor
    Lenovo
    Product
    Legion 7-16arha7 Firmware
    Vendor
    Lenovo
    Product
    Legion 7-16ithg6
    Vendor
    Lenovo
    Product
    Legion 7-16ithg6 Firmware
    Vendor
    Lenovo
    Product
    Legion Pro 5 16irx8
    Vendor
    Lenovo
    Product
    Legion Pro 5 16irx8 Firmware
    Vendor
    Lenovo
    Product
    Legion Pro 7 16irx8
    Vendor
    Lenovo
    Product
    Legion Pro 7 16irx8 Firmware
    Vendor
    Lenovo
    Product
    Legion Pro 7 16irx8h
    Vendor
    Lenovo
    Product
    Legion Pro 7 16irx8h Firmware
    Vendor
    Lenovo
    Product
    Legion S7 16arha7
    Vendor
    Lenovo
    Product
    Legion S7 16arha7 Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 15p G2 Ith
    Vendor
    Lenovo
    Product
    Thinkbook 15p G2 Ith Firmware
    Vendor
    Lenovo
    Product
    Thinkbook 16p G3 Arh
    Vendor
    Lenovo
    Product
    Thinkbook 16p G3 Arh Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High