Lucene search
HistoryJun 13, 2024 - 8:15 p.m.
CVE-2024-4696
cve-2024-4696
privilege escalation
lenovo service bridge
operating system commands
specially crafted link
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
38.6%
A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commands to be executed if a specially crafted link is visited.
Related
vulnrichment
vulnrichment
CVE-2024-4696
2024-06-13 20:01:18
cve
cve
CVE-2024-4696
2024-06-13 20:15:15
cvelist
cvelist
CVE-2024-4696
2024-06-13 20:01:18
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
38.6%
Related for NVD:CVE-2024-4696