CVE-2023-6044

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vantage Service and execute arbitrary code with elevated privileges.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-290

Affected software

Vendor	Product	Versions
Lenovo	Vantage	< 4.0.49.0

References

https://support.lenovo.com/us/en/product_security/LEN-144736Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-144736Vendor Advisory

Timeline

Published: Jan 19, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-60457.8in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion.CVE-2023-60464.8The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as ad CVE-2023-60476.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Algoritim E-commerce Software allows R CVE-2023-60486.5The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not prevent user with low privileges on the site, like subscribers, from s CVE-2023-60499.8The Estatik Real Estate Plugin WordPress plugin before 4.1.1 unserializes user input via some of its cookies, which could allow unauthentica CVE-2023-60506.1The Estatik Real Estate Plugin WordPress plugin before 4.1.1 does not sanitise and escape various parameters and generated URLs before outpu CVE-2023-60516.5An issue has been discovered in GitLab CE/EE affecting all versions before 16.4.4, all versions starting from 16.5 before 16.5.4, all versio CVE-2023-60529.8A vulnerability classified as critical has been found in Tongda OA 2017 up to 11.9. Affected is an unknown function of the file general/syst CVE-2023-60539.8A vulnerability, which was classified as critical, has been found in Tongda OA 2017 up to 11.9. Affected by this issue is some unknown funct CVE-2023-60549.8A vulnerability, which was classified as critical, was found in Tongda OA 2017 up to 11.9. This affects an unknown part of the file general/CVE-2023-60557.4A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate CVE-2023-60567.4A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-si