CVE-2022-3699

A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 that could allow a local user to execute code with elevated privileges.

Score

CVSS 3.1 7.8 High

Status

Modified - psirt@lenovo.com

Published

2023-10-25

Last modified

2024-09-17

Weaknesses

CWE-787

Affected products

• Diagnostics (Lenovo)
• Hardwarescan Addin (Lenovo)
• Hardwarescan Plugin (Lenovo)
• Hardwarescanplugin (Lenovo)

References

• https://support.lenovo.com/us/en/product_security/LEN-102365
• https://support.lenovo.com/us/en/product_security/LEN-94532