CVE Catalog
CVE-2023-4029
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0.18%
8th percentile - higher than 8% of all known CVEs
Summary
A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products, which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Risk Assessment
The risk to the organization involves the potential for a local attacker to execute malicious code, which could lead to data loss or system takeover.
Recommendation
It is recommended to update drivers and monitor system access to mitigate the risk of exploitation of this vulnerability.
Original NVD description (English source)
A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.