CVE-2023-34419: Lenovo Legion 5-15ach6 Firmware

Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days.

A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.

Affected products

  • Lenovo Legion 5-15ach6 Firmware: affected versions not specified
  • Lenovo Legion 5-15ach6a Firmware: affected versions not specified
  • Lenovo Legion 5-15ach6h Firmware: affected versions not specified
  • Lenovo Legion 5-15ith6 Firmware: affected versions not specified
  • Lenovo Legion 5-15ith6h Firmware: affected versions not specified
  • Lenovo Legion 5-17ach6 Firmware: affected versions not specified
  • Lenovo Legion 5-17ach6h Firmware: affected versions not specified
  • Lenovo Legion 5-17ith6 Firmware: affected versions not specified
  • Lenovo Legion 5-17ith6h Firmware: affected versions not specified
  • Lenovo Legion 5 15arh7 Firmware: affected versions not specified
  • Lenovo Legion 5 15arh7h Firmware: affected versions not specified
  • Lenovo Legion 5 15iah7 Firmware: before j2cn51ww (fixed in j2cn51ww)
  • Lenovo Legion 5 15iah7h Firmware: before j2cn51ww (fixed in j2cn51ww)
  • Lenovo Legion 5 Pro-16ach6 Firmware: affected versions not specified
  • Lenovo Legion 5 Pro-16ach6h Firmware: affected versions not specified
  • Lenovo Legion 5 Pro-16ith6 Firmware: affected versions not specified
  • Lenovo Legion 5 Pro-16ith6h Firmware: affected versions not specified
  • Lenovo Legion 5 Pro 16arh7 Firmware: affected versions not specified
  • Lenovo Legion 5 Pro 16arh7h Firmware: affected versions not specified
  • Lenovo Legion 5 Pro 16iah7 Firmware: before j2cn51ww (fixed in j2cn51ww)
  • Lenovo Legion 5 Pro 16iah7h Firmware: before j2cn51ww (fixed in j2cn51ww)
  • Lenovo Legion 7-16achg6 Firmware: affected versions not specified
  • Lenovo Legion 7-16arha7 Firmware: affected versions not specified
  • Lenovo Legion 7-16ithg6 Firmware: affected versions not specified
  • Lenovo Legion Pro 5 16irx8 Firmware: before kwcn37ww (fixed in kwcn37ww)
  • and 5 more

Published 2023-08-17. Last modified 2026-06-17.