Lucene search

LenovoCVELIST:CVE-2022-0636

HistoryApr 22, 2022 - 8:30 p.m.

CVE-2022-0636

2022-04-2220:30:49

CWE-120

lenovo

www.cve.org

cve-2022-0636

system crash

lenovo thin installer

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

EPSS

Percentile

12.6%

JSON

A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a system crash.

CNA Affected

[
  {
    "product": "Thin Installer",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "1.3.0039",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

support.lenovo.com/us/en/product_security/LEN-78116

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

EPSS

Percentile

12.6%

JSON

Related for CVELIST:CVE-2022-0636