CVE-2023-4632

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@lenovo.com

Published

2023-11-08

Last modified

2024-09-03

Weaknesses

CWE-427

Affected products

• Lenovo System Update (Lenovo)
• System Update (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-135367