Lenovo Xiaoxin 16 (83CD001PCN)

Lenovo Xiaoxin 16 (83CD001PCN)
Security Grade A Calculator v	Lenovo Xiaoxin 16 (83CD001PCN) Brand: Lenovo (Parent: Lenovo Group Limited) Category: Laptop • Model / Gen: 83CD001PCN Release Date: 2024-01-01 • Status: In sale Classification Date: • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	None	—
Known vulnerabilities	Rare	🔗 Proof
Prior attacks	Rare	🔗 Proof
Updatability	Very common	—
Category Score	Score: 2 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Full	—
Communications	Encrypted with up-to-date encryption	—
Storage	Encrypted with up-to-date encryption	—
Category Score	Score: 1 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	—
Authentication	Secure	—
Brute-force protection	Exist	—
Event logging	Access event logged	—
Passwords	Require change after setup with complexity requirements	—
Category Score	Score: 1 / 3

Technical Specifications

Property	Details
Operating System & App	Windows 11 (Companion App: )
Hardware (CPU / GPU)	CPU: Intel Core i5-13500H • GPU:
Memory & Storage	Memory: 16 GB RAM • Storage: 512 GB SSD
Power, Battery & Charging	Battery: Li-polymer, 60 Wh • Power: • Charging:
Display & Camera	Display: 16 inch IPS, 1920 x 1200 • Camera:
Sound & Connectivity	Sound: • Connectivity: Wi-Fi 6, Bluetooth 5.2, USB-C, HDMI
Physical (Dimensions & Mass)	Dimensions: • Mass:

This laptop runs Windows 11 and is affected by CVE-2024-38077, a heap-based buffer overflow in the Windows Remote Desktop Licensing Service (CVSS 9.8, Critical). It allows an unauthenticated attacker on the network to execute arbitrary code remotely. Microsoft patched it in the July 2024 security update. A laptop that does not install Windows updates stays exposed, and because it stores personal files and passwords, it is the most attractive target on the home LAN. Once compromised, it can be used as a pivot point to attack other devices.