medium6.7
CVE-2023-34419
A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated pr…
Impact
A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Legion 5 Pro 16iah7h Firmware | before j2cn51ww |
| Lenovo | Legion 5 Pro 16iah7 Firmware | before j2cn51ww |
| Lenovo | Legion 5 Pro 16arh7 Firmware | All versions |
| Lenovo | Legion 5 Pro 16arh7h Firmware | All versions |
| Lenovo | Legion 5 15arh7 Firmware | All versions |
| Lenovo | Legion 5 15arh7h Firmware | All versions |
| Lenovo | Legion 5 15iah7h Firmware | before j2cn51ww |
| Lenovo | Legion 5 15iah7 Firmware | before j2cn51ww |
| Lenovo | Legion 5 Pro-16ach6 Firmware | All versions |
| Lenovo | Legion 5 Pro-16ach6h Firmware | All versions |
| Lenovo | Legion 5 Pro-16ith6 Firmware | All versions |
| Lenovo | Legion 5 Pro-16ith6h Firmware | All versions |