5 matches found
CVE-2026-0827
CVE-2026-0827 concerns Lenovo Diagnostics and the HardwareScanAddin in Lenovo Vantage. The issue, discovered during internal testing, could allow a local authenticated user to perform arbitrary file writes with elevated privileges during installation or while running a hardware scan. The availabl...
CVE-2022-3699
A privilege escalation vulnerability exists in the Lenovo Diagnostics Driver (used by Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45). The root cause is incorrect access control , allowing a low-privileged user to issue device IOCTLs to perform arb...
CVE-2020-8338
CVE-2020-8338 affects Lenovo Diagnostics. A DLL search path vulnerability in Lenovo Diagnostics prior to version 4.35.4 could allow a local attacker to execute code with elevated privileges. Lenovo’s advisory confirms privilege escalation potential and recommends upgrading to Lenovo Diagnostics 4...
CVE-2022-0353
Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 are affected by a denial-of-service vulnerability that could allow a local administrator to trigger a system crash. This is documented across multiple sources (including Red Hat and NVD) as a local D...