Lenovo 13W Yoga Firmware vulnerabilities

2 known vulnerabilities affecting lenovo/13w_yoga_firmware.

Total CVEs

2

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-4028MEDIUMCVSS 6.7fixed in jacn38ww2023-08-17

CVE-2023-4028 [MEDIUM] CWE-120 CVE-2023-4028: A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Noteboo A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

CVE-2022-1892HIGHCVSS 7.8fixed in jacn31ww2023-01-26

CVE-2022-1892 [HIGH] CWE-122 CVE-2022-1892: A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an a A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.