High · 7.8 CVE-2023-6338 EUVD-2023-58579GHSA-4j56-jg72-x59r

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local …

Published Jan 3, 2024 · Updated Jun 3, 2025 · Assigned by lenovo

Vendor: Lenovo Product: Universal Device Client (UDC)

Description

Uncontrolled search path vulnerabilities were reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.

Affected products

Vendor	Product	Affected	Fixed
Lenovo	Universal Device Client (UDC)	– < 23.10	23.10

References

https://support.lenovo.com/us/en/product_security/LEN-121183