CVE-2023-6450

CWE-400 — Uncontrolled Resource Consumption CWE-4043 documents3 sources

Severity

5.5MEDIUM

EPSS

0.0%

top 93.34%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Lenovo Lenovo APP Store Application Lenovo APP Store

Timeline

PublishedJan 19

Description

An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a denial of service.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDlenovo/app_store< 12.4.20

▶CVEListV5lenovo/lenovo_app_store_application — 12.4.20

🔴Vulnerability Details

CVEList

CVE-2023-6450: An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a d↗2024-01-19

▶

GHSA

GHSA-7325-gcx9-7xh4: An incorrect permissions vulnerability was reported in the Lenovo App Store app that could allow an attacker to use system resources, resulting in a d↗2024-01-19

▶