CVE-2023-34419

A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

Score

CVSS 3.1 6.7 Medium

Status

Modified - psirt@lenovo.com

Published

2023-08-17

Last modified

2024-08-02

Weaknesses

CWE-120

Affected products

• Legion 5-15ach6 Firmware (Lenovo)
• Legion 5-15ach6a Firmware (Lenovo)
• Legion 5-15ach6h Firmware (Lenovo)
• Legion 5-15ith6 Firmware (Lenovo)
• Legion 5-15ith6h Firmware (Lenovo)
• Legion 5-17ach6 Firmware (Lenovo)
• Legion 5-17ach6h Firmware (Lenovo)
• Legion 5-17ith6 Firmware (Lenovo)
• Legion 5-17ith6h Firmware (Lenovo)
• Legion 5 15arh7 Firmware (Lenovo)
• Legion 5 15arh7h Firmware (Lenovo)
• Legion 5 15iah7 Firmware (Lenovo)
• Legion 5 15iah7h Firmware (Lenovo)
• Legion 5 Pro-16ach6 Firmware (Lenovo)
• Legion 5 Pro-16ach6h Firmware (Lenovo)
• Legion 5 Pro-16ith6 Firmware (Lenovo)
• Legion 5 Pro-16ith6h Firmware (Lenovo)
• Legion 5 Pro 16arh7 Firmware (Lenovo)
• Legion 5 Pro 16arh7h Firmware (Lenovo)
• Legion 5 Pro 16iah7 Firmware (Lenovo)
• Legion 5 Pro 16iah7h Firmware (Lenovo)
• Legion 7-16achg6 Firmware (Lenovo)
• Legion 7-16arha7 Firmware (Lenovo)
• Legion 7-16ithg6 Firmware (Lenovo)
• Legion Pro 5 16irx8 Firmware (Lenovo)
• Legion Pro 7 16irx8 Firmware (Lenovo)
• Legion Pro 7 16irx8h Firmware (Lenovo)
• Legion S7 16arha7 Firmware (Lenovo)
• Lenovo Notebook (Lenovo)
• Thinkbook 15p G2 Ith Firmware (Lenovo)
• Thinkbook 16p G3 Arh Firmware (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-134879