High · 7.8 CVE-2023-3078 EUVD-2023-43769GHSA-83mr-cmmf-2ggv

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local …

Published Aug 17, 2023 · Updated Oct 8, 2024 · Assigned by lenovo

Vendor: Lenovo Product: Universal Device Client (UDC)

Description

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.

Affected products

Vendor	Product	Affected	Fixed
Lenovo	Universal Device Client (UDC)	< 23.10	23.10

References

https://support.lenovo.com/us/en/product_security/LEN-121183