Uncontrolled Search Path Vulnerabilities in Lenovo Universal Device Client

CVE-2023-6338

What is CVE-2023-6338?

The Lenovo Universal Device Client is impacted by uncontrolled search path vulnerabilities that may allow an attacker with local access to the system to execute arbitrary code with elevated privileges. This situation presents a serious risk, as unauthorized users could manipulate the execution path of applications to run malicious code, potentially leading to further system compromise. Users are advised to apply the necessary security updates and follow best practices to mitigate these risks.

References