CVE-2023-3078

HIGH 7.8CVE-2023-3078 · Published 17/08/2023 · updated 17/06/2026

In short

CVE-2023-3078 is a HIGH (CVSS 7.8) vulnerability affecting universal device client (lenovo).
Chance of exploitation in the next 30 days (EPSS): 0.22%, higher than 12.3% of all vulnerabilities.
Fix: update to 23.4 or later.

Package	Affected versions	Patched versions
universal device client lenovo	`< 23.4`	`23.4`

Description

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to execute code with elevated privileges.

References

support.lenovo.com/us/en/product_security/LEN-121183 · Vendor Advisory

More vulnerabilities in universal device client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free