CVE-2023-4028

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-17 · updated 2026-06-17
Weakness: CWE-120

Description

A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

Lenovo 13W Yoga Firmware: before jacn38ww — fixed in jacn38ww
Lenovo 13W Yoga Gen 2 Firmware: before kbcn20ww — fixed in kbcn20ww
Lenovo Flex 5-14Alc05 Firmware: before gjcn32ww — fixed in gjcn32ww
Lenovo Flex 5-14Are05 Firmware: before eecn43ww — fixed in eecn43ww
Lenovo Flex 5-14Iil05 Firmware: before eccn45ww — fixed in eccn45ww
Lenovo Flex 5-14Itl05 Firmware: before fxcn44ww — fixed in fxcn44ww
Lenovo Flex 5-15Alc05 Firmware: before gjcn32ww — fixed in gjcn32ww
Lenovo Flex 5-15Iil05 Firmware: before eccn45ww — fixed in eccn45ww
Lenovo Flex 5-15Itl05 Firmware: before fxcn44ww — fixed in fxcn44ww
Lenovo Flex 7 14Iru8 Firmware: before l6cn20ww — fixed in l6cn20ww
Lenovo Ideapad 1-11Ada05 Firmware: before fqcn29ww — fixed in fqcn29ww
Lenovo Ideapad 1-11Igl05 Firmware: before dwcn28ww — fixed in dwcn28ww
Lenovo Ideapad 1-14Ada05 Firmware: before fqcn29ww — fixed in fqcn29ww
Lenovo Ideapad 1-14Igl05 Firmware: before dwcn28ww — fixed in dwcn28ww
Lenovo Ideapad Flex 5 14Abr8 Firmware: before l7cn17ww — fixed in l7cn17ww
Lenovo Ideapad Flex 5 14Alc7 Firmware: before jccn35ww — fixed in jccn35ww
Lenovo Ideapad Flex 5 14Iau7 Firmware: before j7cn44ww — fixed in j7cn44ww
Lenovo Ideapad Flex 5 14Iru8 Firmware: before l6cn20ww — fixed in l6cn20ww
Lenovo Ideapad Flex 5 16Abr8 Firmware: before l7cn17ww — fixed in l7cn17ww
Lenovo Ideapad Flex 5 16Alc7 Firmware: before jccn35ww — fixed in jccn35ww
Lenovo Ideapad Flex 5 16Iau7 Firmware: before j7cn44ww — fixed in j7cn44ww
Lenovo Ideapad Flex 5 16Iru8 Firmware: before l6cn20ww — fixed in l6cn20ww
Lenovo Thinkbook 13S G2 Are Firmware: before fvcn28ww — fixed in fvcn28ww
Lenovo Thinkbook 13S G2 Itl Firmware: before f9cn57ww — fixed in f9cn57ww
Lenovo Thinkbook 13S G3 Acn Firmware: before gmcn35ww — fixed in gmcn35ww
Lenovo Thinkbook 13S G4 Iap Firmware: before hwcn49ww — fixed in hwcn49ww
Lenovo Thinkbook 13X G2 Iap Firmware: before hxcn54ww — fixed in hxcn54ww
Lenovo Thinkbook 14S G2 Itl Firmware: before f9cn57ww — fixed in f9cn57ww
Lenovo Yoga 9-15Imh5 Firmware: before epcn32ww — fixed in epcn32ww

How to fix

Upgrade to a fixed version: Lenovo 13W Yoga Firmware jacn38ww; Lenovo 13W Yoga Gen 2 Firmware kbcn20ww; Lenovo Flex 5-14Alc05 Firmware gjcn32ww; Lenovo Flex 5-14Are05 Firmware eecn43ww; Lenovo Flex 5-14Iil05 Firmware eccn45ww; Lenovo Flex 5-14Itl05 Firmware fxcn44ww; Lenovo Flex 5-15Alc05 Firmware gjcn32ww; Lenovo Flex 5-15Iil05 Firmware eccn45ww; Lenovo Flex 5-15Itl05 Firmware fxcn44ww; Lenovo Flex 7 14Iru8 Firmware l6cn20ww; Lenovo Ideapad 1-11Ada05 Firmware fqcn29ww; Lenovo Ideapad 1-11Igl05 Firmware dwcn28ww. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2023-4028 or the next vulnerability affects your stack