CVE-2023-6338CWE-427

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute…

High · published January 3, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
10.6
In the wild
Unconfirmed
What it is

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00210 · 10.6th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2024-01-03T21:00Z
EPSS history
Timeline
  • 03 JAN 21:00Z
    Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute…
    cvelistv5