6.7
Medium
CVE-2023-4028 A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may…
Description
A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo Notebook | Versions not published | |
| ideapad_flex_5_16iau7 | 0 | No fix stated |
| ideapad_flex_5_16iru8 | 0 | No fix stated |
| 13w_yoga 82 | 82s1 → 82s2 | No fix stated |
| 13w_yoga_gen_2 82 | 82yr → 82y2 | No fix stated |
| ideapad_5-14alc05 | 0 | No fix stated |
| ideapad_5-15alc05 | 0 | No fix stated |
| flex_5-14are05 | 0 | No fix stated |
| flex_5-14iil05 | 0 | No fix stated |
Show the 23 other branches Hide the 23 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| flex_5-14itl05 | 0 | No fix stated |
| flex_5-15alc05 | 0 | No fix stated |
| flex_5-15iil05 | 0 | No fix stated |
| flex_5-15itl05 | 0 | No fix stated |
| ideapad_1-11ada05 | 0 | No fix stated |
| ideapad_1-11igl05 | 0 | No fix stated |
| ideapad_1-14ada05 | 0 | No fix stated |
| ideapad_1-14igl05 | 0 | No fix stated |
| ideapad_flex_5_14abr8 | 0 | No fix stated |
| ideapad_flex_5_14alc7 | 0 | No fix stated |
| ideapad_flex_5_14iau7 | 0 | No fix stated |
| ideapad_flex_5_14iru8 | 0 | No fix stated |
| ideapad_flex_5_16abr8 | 0 | No fix stated |
| ideapad_flex_5_16alc7 | 0 | No fix stated |
| flex_7_14iau7_firmware | 0 | No fix stated |
| flex_7_14iru8 | 0 | No fix stated |
| thinkbook_13s_g2_are | 0 | No fix stated |
| thinkbook_13s_g2_itl | 0 | No fix stated |
| thinkbook_13s_g3_acn | 0 | No fix stated |
| thinkbook_13s_g4_iap | 0 | No fix stated |
| thinkbook_13x_g2_iap | 0 | No fix stated |
| thinkbook_14s_g2_itl | 0 | No fix stated |
| yoga_9-15imh5 | 0 | No fix stated |