CVE-2023-6044
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Summary
CVE-2023-6044 is a newly disclosed privilege escalation vulnerability affecting Lenovo Vantage software. This issue grants local attackers with physical access the ability to impersonate Lenovo Vantage Service and run arbitrary code with elevated privileges. Exploitation of this vulnerability could lead to significant compromise of the affected system. Lenovo has released a patch to resolve the issue, and users are advised to apply it as soon as possible to mitigate the risk. Failure to address this vulnerability could result in unauthorized access, data theft, or system manipulation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions