CVE-2022-4569
A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - psirt@lenovo.com
- Published
- 2023-06-05
- Last modified
- 2025-01-08
- Weaknesses
- CWE-276
Affected products
- Thinkpad Hybrid Usb-c With Usb-a Dock Firmware (Lenovo)
- Thinkpad Hybrid Usb-c With Usb-a Dock Firmware Update Tool (Lenovo)
References
- https://support.lenovo.com/us/en/product_security/LEN-103544
