medium6.7
CVE-2023-4028
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access an…
Impact
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | 13w Yoga Firmware | before jacn38ww |
| Lenovo | 13w Yoga Gen 2 Firmware | before kbcn20ww |
| Lenovo | Ideapad 1-11ada05 Firmware | before fqcn29ww |
| Lenovo | Ideapad 1-11igl05 Firmware | before dwcn28ww |
| Lenovo | Ideapad 1-14ada05 Firmware | before fqcn29ww |
| Lenovo | Ideapad 1-14igl05 Firmware | before dwcn28ww |
| Lenovo | Flex 5-14alc05 Firmware | before gjcn32ww |
| Lenovo | Flex 5-14are05 Firmware | before eecn43ww |
| Lenovo | Flex 5-14iil05 Firmware | before eccn45ww |
| Lenovo | Flex 5-14itl05 Firmware | before fxcn44ww |
| Lenovo | Flex 5-15alc05 Firmware | before gjcn32ww |
| Lenovo | Flex 5-15iil05 Firmware | before eccn45ww |