| Lenovo Xiaoxin 16 (83CD001PCN)
|
|
Security Grade
Calculator v1
|
Lenovo Xiaoxin 16 (83CD001PCN)
Category: Laptop • Model / Gen: 83CD001PCN
Release Date: 2024-01-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
None
|
—
|
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
|
| Prior attacks
|
Rare
|
🔗 Proof
|
|
| Updatability
|
Very common
|
—
|
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
—
|
|
| Communications
|
Encrypted with up-to-date encryption
|
—
|
|
| Storage
|
Encrypted with up-to-date encryption
|
—
|
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
—
|
|
| Authentication
|
Secure
|
—
|
|
| Brute-force protection
|
Exist
|
—
|
|
| Event logging
|
Access event logged
|
—
|
|
| Passwords
|
Require change after setup with complexity requirements
|
—
|
|
| Category Score
|
Score: 1 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Windows 11 (Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: Intel Core i5-13500H • GPU:
|
| Memory & Storage
|
Memory: 16 GB RAM • Storage: 512 GB SSD
|
| Power, Battery & Charging
|
Battery: Li-polymer, 60 Wh • Power: • Charging:
|
| Display & Camera
|
Display: 16 inch IPS, 1920 x 1200 • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: Wi-Fi 6, Bluetooth 5.2, USB-C, HDMI
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
This laptop runs Windows 11 and is affected by CVE-2024-38077, a heap-based buffer overflow in the Windows Remote Desktop Licensing Service (CVSS 9.8, Critical). It allows an unauthenticated attacker on the network to execute arbitrary code remotely. Microsoft patched it in the July 2024 security update. A laptop that does not install Windows updates stays exposed, and because it stores personal files and passwords, it is the most attractive target on the home LAN. Once compromised, it can be used as a pivot point to attack other devices.
