CVE-2023-5080

🗓️ 19 Jan 2024 20:06:30Reported by lenovoType

Privilege escalation vulnerability in Lenovo tablet products

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of Lenovo tablet products’ microprogramming software, related to insecure privilege management, allows a perpetrator to execute arbitrary commands.	9 Feb 202400:00	–	bdu_fstec
Circl	CVE-2023-5080	15 Feb 202420:56	–	circl
CNNVD	Lenovo Tablet Security Breach	19 Jan 202400:00	–	cnnvd
Cvelist	CVE-2023-5080	19 Jan 202420:06	–	cvelist
EUVD	EUVD-2023-57420	3 Oct 202520:07	–	euvd
NVD	CVE-2023-5080	19 Jan 202420:15	–	nvd
OSV	CVE-2023-5080	19 Jan 202420:15	–	osv
Prion	Privilege escalation	19 Jan 202420:15	–	prion
Positive Technologies	PT-2024-1559 · Lenovo · Lenovo Tablet	9 Jan 202400:00	–	ptsecurity
RedhatCVE	CVE-2023-5080	23 May 202504:30	–	redhatcve

NVD

Vulners

Node

lenovo tab_m8_hd_tb8505f_firmwareRange<8505f_usr_s301106_2309140042_v9.56_bmp_row

AND

lenovo tab_m8_hd_tb8505fMatch-

Node

lenovo tab_m8_hd_tb8505fs_firmwareRange<8505fs_usr_s301107_2309140028_v9.56_bmp_row

AND

lenovo tab_m8_hd_tb8505fsMatch-

Node

lenovo tab_m8_hd_tb8505x_firmwareRange<8505x_usr_s301129_2309141226_v9.56_bmp_row

AND

lenovo tab_m8_hd_tb8505xMatch-

Node

lenovo tab_m8_hd_tb8505xs_firmwareRange<8505xs_usr_s301077_2309140036_v9.56_bmp_row

AND

lenovo tab_m8_hd_tb8505xsMatch-

Node

lenovo tab_m10_plus_gen_3_tb125fu_firmwareRange<tb125fu_usr_s100116_2311171525_mp1rc_row

AND

lenovo tab_m10_plus_gen_3_tb125fuMatch-

Node

lenovo tab_p11_pro_gen_2_tb132fu_firmwareRange<tb132fu_s240219_231123_row

AND

lenovo tab_p11_pro_gen_2_tb132fuMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "Tablet",
    "vendor": "Lenovo",
    "versions": [
      {
        "status": "affected",
        "version": "various"
      }
    ]
  }
]

Source	Link
support	www.support.lenovo.com/us/en/product_security/LEN-142135

21 Nov 2024 08:41Current

7.1High risk

Vulners AI Score7.1

CVSS 3.16.8 - 7.8

EPSS0.0004

SSVC

CWE-266