CVE-2023-3078
Severity CVSS v4.0:
Pending analysis
Type:
CWE-427
Uncontrolled Search Path Element
Publication date:
17/08/2023
Last modified:
25/08/2023
Description
An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:lenovo:universal_device_client:*:*:*:*:*:*:*:* | 23.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page