Lucene search

[email protected]NVD:CVE-2021-3462

HistoryApr 13, 2021 - 9:15 p.m.

CVE-2021-3462

2021-04-1321:15:25

CWE-276

[email protected]

web.nvd.nist.gov

lenovo

power management

windows 10

privilege escalation

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver’s device object.

Affected configurations

Nvd

Node

lenovopower_management_driverRange<1.67.17.54windows_10

AND

lenovothinkpad_11e_gen_5Match-

lenovothinkpad_11e_yoga_gen_6Match-

lenovothinkpad_13_gen_2Match-

lenovothinkpad_25Match-

lenovothinkpad_a275Match-

lenovothinkpad_a285Match-

lenovothinkpad_a475Match-

lenovothinkpad_a485Match-

lenovothinkpad_e14Match-

lenovothinkpad_e14_gen2Match-

lenovothinkpad_e15Match-

lenovothinkpad_e15_gen2Match-

lenovothinkpad_e470Match-

lenovothinkpad_e470cMatch-

lenovothinkpad_e475Match-

lenovothinkpad_e480Match-

lenovothinkpad_e490Match-

lenovothinkpad_e495Match-

lenovothinkpad_e570Match-

lenovothinkpad_e570cMatch-

lenovothinkpad_e575Match-

lenovothinkpad_e580Match-

lenovothinkpad_e590Match-

lenovothinkpad_e595Match-

lenovothinkpad_l13Match-

lenovothinkpad_l13_gen_1Match-

lenovothinkpad_l13_gen_2Match-

lenovothinkpad_l13_yogaMatch-

lenovothinkpad_l13_yoga_gen_1Match-

lenovothinkpad_l13_yoga_gen_2Match-

lenovothinkpad_l14_gen_1Match-

lenovothinkpad_l14_gen_2Match-

lenovothinkpad_l15_gen_1Match-

lenovothinkpad_l15_gen_2Match-

lenovothinkpad_l380Match-

lenovothinkpad_l380_yogaMatch-

lenovothinkpad_l390Match-

lenovothinkpad_l390_yogaMatch-

lenovothinkpad_l470Match-

lenovothinkpad_l480Match-

lenovothinkpad_l490Match-

lenovothinkpad_l570Match-

lenovothinkpad_l580Match-

lenovothinkpad_l590Match-

lenovothinkpad_p1Match-

lenovothinkpad_p1_gen_2Match-

lenovothinkpad_p1_gen_3Match-

lenovothinkpad_p14s_gen_1Match-

lenovothinkpad_p14s_gen_2Match-

lenovothinkpad_p15_gen_1Match-

lenovothinkpad_p15s_gen_1Match-

lenovothinkpad_p15s_gen_2Match-

lenovothinkpad_p15v_gen_1Match-

lenovothinkpad_p17_gen_1Match-

lenovothinkpad_p43sMatch-

lenovothinkpad_p51Match-

lenovothinkpad_p51sMatch-

lenovothinkpad_p52Match-

lenovothinkpad_p52sMatch-

lenovothinkpad_p53Match-

lenovothinkpad_p53sMatch-

lenovothinkpad_p71Match-

lenovothinkpad_p72Match-

lenovothinkpad_p73Match-

lenovothinkpad_r14Match-

lenovothinkpad_r14_gen_2Match-

lenovothinkpad_r480Match-

lenovothinkpad_s1_gen_4Match-

lenovothinkpad_s2_gen_2Match-

lenovothinkpad_s2_gen_5Match-

lenovothinkpad_s2_gen_6Match-

lenovothinkpad_s2_yoga_gen_5Match-

lenovothinkpad_s2_yoga_gen_6Match-

lenovothinkpad_s3_gen_2Match-

lenovothinkpad_s5_gen_2Match-

lenovothinkpad_t14_gen_1Match-

lenovothinkpad_t14_gen_2Match-

lenovothinkpad_t14s_gen_1Match-

lenovothinkpad_t14s_gen_2iMatch-

lenovothinkpad_t15_gen_1Match-

lenovothinkpad_t15_gen_2Match-

lenovothinkpad_t15g_gen_1Match-

lenovothinkpad_t15p_gen_1Match-

lenovothinkpad_t470Match-

lenovothinkpad_t470pMatch-

lenovothinkpad_t470sMatch-

lenovothinkpad_t480Match-

lenovothinkpad_t480sMatch-

lenovothinkpad_t490Match-

lenovothinkpad_t490sMatch-

lenovothinkpad_t495Match-

lenovothinkpad_t570Match-

lenovothinkpad_t580Match-

lenovothinkpad_t590Match-

lenovothinkpad_x1_carbon_gen_5Match-

lenovothinkpad_x1_carbon_gen_6Match-

lenovothinkpad_x1_carbon_gen_7Match-

lenovothinkpad_x1_carbon_gen_8Match-

lenovothinkpad_x1_carbon_gen_9Match-

lenovothinkpad_x1_extremeMatch-

lenovothinkpad_x1_extreme_2ndMatch-

lenovothinkpad_x1_extreme_gen_3Match-

lenovothinkpad_x1_nano_gen_1Match-

lenovothinkpad_x1_tablet_gen_2Match-

lenovothinkpad_x1_tablet_gen_3Match-

lenovothinkpad_x1_titanium_gen_1Match-

lenovothinkpad_x1_yoga_gen_2Match-

lenovothinkpad_x1_yoga_gen_3Match-

lenovothinkpad_x1_yoga_gen_4Match-

lenovothinkpad_x1_yoga_gen_5Match-

lenovothinkpad_x1_yoga_gen_6Match-

lenovothinkpad_x12Match-

lenovothinkpad_x13_gen_1Match-

lenovothinkpad_x13_gen_2iMatch-

lenovothinkpad_x13_yoga_gen_1Match-

lenovothinkpad_x13_yoga_gen_2Match-

lenovothinkpad_x270Match-

lenovothinkpad_x280Match-

lenovothinkpad_x380_yogaMatch-

lenovothinkpad_x390Match-

lenovothinkpad_x390_yogaMatch-

lenovothinkpad_x395Match-

lenovothinkpad_yoga_11e_gen_5Match-

lenovothinkpad_yoga_370Match-

VendorProductVersionCPE
lenovopower_management_driver*cpe:2.3:a:lenovo:power_management_driver:*:*:*:*:*:windows_10:*:*
lenovothinkpad_11e_gen_5-cpe:2.3:h:lenovo:thinkpad_11e_gen_5:-:*:*:*:*:*:*:*
lenovothinkpad_11e_yoga_gen_6-cpe:2.3:h:lenovo:thinkpad_11e_yoga_gen_6:-:*:*:*:*:*:*:*
lenovothinkpad_13_gen_2-cpe:2.3:h:lenovo:thinkpad_13_gen_2:-:*:*:*:*:*:*:*
lenovothinkpad_25-cpe:2.3:h:lenovo:thinkpad_25:-:*:*:*:*:*:*:*
lenovothinkpad_a275-cpe:2.3:h:lenovo:thinkpad_a275:-:*:*:*:*:*:*:*
lenovothinkpad_a285-cpe:2.3:h:lenovo:thinkpad_a285:-:*:*:*:*:*:*:*
lenovothinkpad_a475-cpe:2.3:h:lenovo:thinkpad_a475:-:*:*:*:*:*:*:*
lenovothinkpad_a485-cpe:2.3:h:lenovo:thinkpad_a485:-:*:*:*:*:*:*:*
lenovothinkpad_e14-cpe:2.3:h:lenovo:thinkpad_e14:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lenovo	power_management_driver	*	cpe:2.3:a:lenovo:power_management_driver::::::windows_10::*
lenovo	thinkpad_11e_gen_5	-	cpe:2.3:h:lenovo:thinkpad_11e_gen_5:-:::::::*
lenovo	thinkpad_11e_yoga_gen_6	-	cpe:2.3:h:lenovo:thinkpad_11e_yoga_gen_6:-:::::::*
lenovo	thinkpad_13_gen_2	-	cpe:2.3:h:lenovo:thinkpad_13_gen_2:-:::::::*
lenovo	thinkpad_25	-	cpe:2.3:h:lenovo:thinkpad_25:-:::::::*
lenovo	thinkpad_a275	-	cpe:2.3:h:lenovo:thinkpad_a275:-:::::::*
lenovo	thinkpad_a285	-	cpe:2.3:h:lenovo:thinkpad_a285:-:::::::*
lenovo	thinkpad_a475	-	cpe:2.3:h:lenovo:thinkpad_a475:-:::::::*
lenovo	thinkpad_a485	-	cpe:2.3:h:lenovo:thinkpad_a485:-:::::::*
lenovo	thinkpad_e14	-	cpe:2.3:h:lenovo:thinkpad_e14:-:::::::*

Rows per page:

1-10 of 1251

References

support.lenovo.com/us/en/product_security/LEN-59174

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2021-3462

cvelist1 cve1 prion1 lenovo1