Lenovo Diagnostics Vulnerability - Lenovo Support NL

**Lenovo Security Advisory:**LEN-32702

**Potential Impact:**Privilege escalation

**Severity:**High

**Scope of Impact:**Lenovo-specific

**CVE Identifier:**CVE-2020-8338

Summary Description:

A DLL search path vulnerability was reported in Lenovo Diagnostics that could allow a user with local access to execute code on the system.

Mitigation Strategy for Customers (what you should do to protect yourself):

Upgrade to Lenovo Diagnostics version 4.35.4 (or newer).

Lenovo Diagnostics for Windows 10 (32-bit), 8.1 (32-bit), 8 (32-bit), 7 (32-bit), XP (32-bit), 2003 Advanced Server (32-bit)

Lenovo Diagnostics for Windows 10 (64-bit), 8.1 (64-bit), 8 (64-bit), 7 (64-bit), 2003 Advanced Server (64-bit) and 2008 Advanced Server (64-bit)

Acknowledgement:

Lenovo thanks Xavier DANEST - Decathlon for reporting this issue.

Revision History:

For a complete list of all Lenovo Product Security Advisories, click here.

For the most up to date information, please remain current with updates and advisories from Lenovo regarding your equipment and software. The information provided in this advisory is provided on an “as is” basis without any warranty or guarantee of any kind. Lenovo reserves the right to change or update this advisory at any time.