CVE-2023-3078CWE-427

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute…

High · published August 17, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00218 · 11.7th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-08-17T16:47Z
EPSS history
Timeline
  • 17 AUG 16:47Z
    An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute…
    cvelistv5