Potential BIOS Update Tool Vulnerability Could Allow Local User Execution of Arbitrary Code

CVE-2023-25493

What is CVE-2023-25493?

A vulnerability has been identified in the BIOS update tool driver used in several Lenovo products, including Desktop models, Smart Edge, Smart Office, and ThinkStation lines. This vulnerability could provide a local user with elevated privileges the opportunity to execute arbitrary code, potentially compromising the system's integrity and security. It is crucial for users to stay informed and apply the necessary security updates to mitigate risks associated with this issue.

References