Lucene search

[email protected]CVE-2022-3701

HistoryOct 27, 2023 - 8:15 p.m.

CVE-2022-3701

2023-10-2720:15:08

CWE-367

CWE-269

[email protected]

web.nvd.nist.gov

lenovo

vantage

systemupdate

cve-2022-3701

privilege elevation

vulnerability

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.

Affected configurations

NVD

Node

lenovosystem_update_pluginRange<2.0.0.213lenovo_vantage

Node

lenovohardware_scan_pluginRange<1.3.1.2lenovo_vantage

Node

lenovohardware_scan_addinRange<2.4.1.1lenovo_vantage

CPENameOperatorVersion
lenovo:system_update_pluginlenovo system update pluginlt2.0.0.213

CPE	Name	Operator	Version
lenovo:system_update_plugin	lenovo system update plugin	lt	2.0.0.213

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Vantage SystemUpdate Plugin",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "2.0.0.213",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-94532

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-3701

prion1 nvd1 cvelist1