CVSS 3.1 Score 6.8 of 10 (medium)


Published Jan 19, 2024
Updated: Jan 26, 2024
CWE ID 290


CVE-2023-6044 is a privilege escalation vulnerability reported in Lenovo Vantage, affecting the Lenovo Vantage Service. This vulnerability allows a local attacker with physical access to impersonate the Lenovo Vantage Service and execute arbitrary code with elevated privileges. The risk score for this vulnerability is 25, indicating a medium level of severity. The exploitability score is 0.9, meaning that it can be easily exploited. The base severity is also medium, with a base score of 6.8. The impact of this vulnerability includes high integrity and confidentiality impacts, as well as high availability impact. No user interaction or privileges are required for exploitation. It is categorized as CWE-290, which refers to Authentication Bypass by Spoofing. Remediation steps are not provided in the given information.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-6044 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options