CVE-2023-4632CWE-427

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated…

High · published November 8, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
24.2
In the wild
Unconfirmed
What it is

An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00323 · 24.2th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2023-11-08T21:58Z
EPSS history
Timeline
  • 08 NOV 21:58Z
    An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated…
    cvelistv5