Lucene search

K
nvd[email protected]NVD:CVE-2023-6043
HistoryJan 19, 2024 - 8:15 p.m.

CVE-2023-6043

2024-01-1920:15:12
CWE-295
web.nvd.nist.gov
4
lenovo vantage
privilege escalation
integrity checks
arbitrary code
elevated privileges

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated privileges.

Affected configurations

Nvd
Node
lenovovantageRange<4.0.49.0
VendorProductVersionCPE
lenovovantage*cpe:2.3:a:lenovo:vantage:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2023-6043