Lucene search
LenovoCVELIST:CVE-2020-8338HistoryOct 14, 2020 - 9:25 p.m.
CVE-2020-8338
2020-10-1421:25:20
CWE-426
lenovo
www.cve.org
3
lenovo
diagnostics
vulnerability
dll
code execution
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.
CNA Affected
[
{
"product": "Diagnostics",
"vendor": "Lenovo",
"versions": [
{
"lessThan": "4.35.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
lenovo
lenovo
Lenovo Diagnostics Vulnerability - Lenovo Support NL
2020-09-06 17:35:14
Lenovo Diagnostics Vulnerability - Lenovo Support US
2020-09-06 17:35:14
cve
cve
CVE-2020-8338
2020-10-14 22:15:13
prion
prion
Path traversal
2020-10-14 22:15:00
nvd
nvd
CVE-2020-8338
2020-10-14 22:15:13
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2020-8338