CVE-2022-3702

CVE-2022-3702 affects Lenovo Vantage HardwareScan Plugin prior to or at version 1.3.0.5. The issue is described as a local vulnerability that could allow a local attacker to delete contents of an arbitrary directory under certain conditions. Documents list the affected software, but do not detail...

CVE-2022-3700

CVE-2022-3700 describes a TOCTOU race condition in Lenovo Vantage SystemUpdate Plugin (versions

CVE-2022-3701

CVE-2022-3701 describes a privilege-elevation flaw in the Lenovo Vantage SystemUpdate plugin, affected up to version 2.0.0.212. A local attacker could execute arbitrary code with elevated privileges. The issue affects the plugin’s ability to run with higher rights, enabling a potentially destruct...