Lucene search

LenovoCVE-2019-6198

HistoryJul 31, 2024 - 9:15 p.m.

CVE-2019-6198

2024-07-3121:15:12

CWE-287

lenovo

web.nvd.nist.gov

lenovo

pc manager

privilege escalation

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.4%

JSON

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.

Affected configurations

Nvd

Node

lenovopcmanagerRange<2.8.90.11211

VendorProductVersionCPE
lenovopcmanager*cpe:2.3:a:lenovo:pcmanager:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lenovo	pcmanager	*	cpe:2.3:a:lenovo:pcmanager::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PC Manager",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "2.8.90.11211",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

iknow.lenovo.com.cn/detail/186945.html

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

Percentile

9.4%

JSON

Related for CVE-2019-6198