Lucene search
HistoryOct 25, 2023 - 6:16 p.m.
CVE-2022-0353
lenovo
hardwarescanplugin
diagnostics
denial of service
system crash
local user
administrative access
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
AI Score
4.6
Confidence
High
EPSS
0
Percentile
5.1%
A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to
1.3.1.2
and
Lenovo Diagnostics versions prior to 4.45
that could allow a local user with administrative access to trigger a system crash.
Affected configurations
Node
lenovodiagnosticsRange<4.45.0
ORlenovohardwarescan_addinRange<2.4.1.1
ORlenovohardwarescan_pluginRange<1.3.1.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lenovo | diagnostics | * | cpe:2.3:a:lenovo:diagnostics:*:*:*:*:*:*:*:* |
| lenovo | hardwarescan_addin | * | cpe:2.3:a:lenovo:hardwarescan_addin:*:*:*:*:*:*:*:* |
| lenovo | hardwarescan_plugin | * | cpe:2.3:a:lenovo:hardwarescan_plugin:*:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2022-0353
2023-10-24 20:39:21
cve
cve
CVE-2022-0353
2023-10-25 18:16:54
cvelist
cvelist
CVE-2022-0353
2023-10-24 20:39:21
prion
prion
Denial of service
2023-10-25 18:16:00
CVSS3
4.4
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
AI Score
4.6
Confidence
High
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2022-0353