Lucene search

LenovoCVELIST:CVE-2020-8345

HistoryOct 14, 2020 - 9:25 p.m.

CVE-2020-8345

2020-10-1421:25:20

CWE-427

lenovo

www.cve.org

dll search path

lenovo hardwarescan plugin

lenovo vantage

privilege escalation

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

27.2%

JSON

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege.

CNA Affected

[
  {
    "product": "Vantage HardwareScan Plugin",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "1.0.46.11",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-44421

CVSS3

7.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

27.2%

JSON

Related for CVELIST:CVE-2020-8345