CVE Catalog
CVE-2023-34419
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0.18%
8th percentile - higher than 8% of all known CVEs
Summary
A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Risk Assessment
The risk to the organization is the potential for malicious code execution by a local attacker, which could lead to data loss or system takeover.
Recommendation
It is recommended to update drivers to the latest version and restrict local access to devices to minimize risk.
Original NVD description (English source)
A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.