Lucene search

[email protected]NVD:CVE-2019-6149

HistoryMar 18, 2019 - 1:32 a.m.

CVE-2019-6149

2019-03-1801:32:29

CWE-428

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.

Affected configurations

Nvd

Node

lenovothinkpad_x1_carbonMatch-

AND

lenovodynamic_power_reductionRange<2.2.2.0

VendorProductVersionCPE
lenovothinkpad_x1_carbon-cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:*:*:*:*:*:*:*
lenovodynamic_power_reduction*cpe:2.3:a:lenovo:dynamic_power_reduction:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lenovo	thinkpad_x1_carbon	-	cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:::::::*
lenovo	dynamic_power_reduction	*	cpe:2.3:a:lenovo:dynamic_power_reduction::::::::

References

www.securityfocus.com/bid/107438

support.lenovo.com/solutions/LEN-25674

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2019-6149

lenovo2 cve1 cvelist1 prion1 threatpost1