Privilege escalation

2023-10-2518:17:00

PRIOn knowledge base

www.prio-n.com

lenovo

hardwarescanplugin

diagnostics

privilege escalation

vulnerability

local user

code execution

elevated privileges

nvd

0.002 Low

EPSS

Percentile

52.6%

JSON

A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45

that could allow a local user to execute code with elevated privileges.

CPENameOperatorVersion
diagnosticslt4.45.0
hardwarescan_addinlt2.4.1.1
hardwarescan_pluginlt1.3.1.2

Name	Operator	Version
diagnostics	lt	4.45.0
hardwarescan_addin	lt	2.4.1.1
hardwarescan_plugin	lt	1.3.1.2

References

support.lenovo.com/us/en/product_security/LEN-102365

support.lenovo.com/us/en/product_security/LEN-94532

0.002 Low

EPSS

Percentile

52.6%

JSON

Related for PRION:CVE-2022-3699