PT-2024-12063 · Lenovo · Lenovo Desktop+3
CVE-2023-25493
·
Published
2024-04-05
·
Updated
2024-09-16
CVSS v3.1
6.7
Medium
| Vector | AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Lenovo Desktop, Smart Edge, Smart Office, and ThinkStation products (affected versions not specified)
Description
A potential issue was reported in the BIOS update tool driver for some Lenovo products, which could allow a local user with elevated privileges to execute arbitrary code.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this issue.
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Lenovo Desktop
Smart Edge
Smart Office
Thinkstation