Vulnerability Details CVE-2023-4632
An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.2%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2023-4632
-
cpe:2.3:a:lenovo:system_update:-
-
cpe:2.3:a:lenovo:system_update:5.06.0027
-
cpe:2.3:a:lenovo:system_update:5.06.0034
-
cpe:2.3:a:lenovo:system_update:5.06.0043
-
cpe:2.3:a:lenovo:system_update:5.07.0008
-
cpe:2.3:a:lenovo:system_update:5.07.0013
-
cpe:2.3:a:lenovo:system_update:5.07.0019
-
cpe:2.3:a:lenovo:system_update:5.07.0072
-
cpe:2.3:a:lenovo:system_update:5.07.0084
-
cpe:2.3:a:lenovo:system_update:5.07.0088
-
cpe:2.3:a:lenovo:system_update:5.07.0106
-
cpe:2.3:a:lenovo:system_update:5.08.01.0005