Lucene search

K

Hardware Scan Plugin Security Vulnerabilities - 2023

cve
cve

CVE-2022-3700

A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files.

6.3CVSS

6.2AI Score

0.0004EPSS

2023-10-27 08:15 PM
10
cve
cve

CVE-2022-3701

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.

7.8CVSS

7.7AI Score

0.0004EPSS

2023-10-27 08:15 PM
11
cve
cve

CVE-2022-3702

A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local attacker to delete contents of an arbitrary directory under certain conditions.

7.1CVSS

6.7AI Score

0.0004EPSS

2023-10-27 08:15 PM
21