CVE-2023-6044

A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vantage Service and execute arbitrary code with elevated privileges.

Score

CVSS 3.1 6.8 Medium

Status

Modified - psirt@lenovo.com

Published

2024-01-19

Last modified

2025-05-30

Weaknesses

CWE-290

Affected products

• Vantage (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-144736