CVE Catalog
CVE-2023-4028
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0.18%
8th percentile - higher than 8% of all known CVEs
Summary
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products, which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Risk Assessment
The risk to the organization involves the potential for a local attacker to execute malicious code, which could lead to data loss or system takeover.
Recommendation
It is recommended to update drivers and monitor system access to mitigate the risk of exploitation of this vulnerability.
Original NVD description (English source)
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.