All the vulnerabilites related to lenovo - thinkpad_x1_yoga_gen_3
Vulnerability from fkie_nvd
Published
2022-04-22 21:15
Modified
2024-11-21 06:40
Severity ?
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
6.7 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_11e_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C62AE4D9-03D9-4C46-ABAA-630ADA4C7E93", "versionEndExcluding": "n15et78w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_11e:-:*:*:*:*:*:*:*", "matchCriteriaId": "247E4294-2547-4A1D-942A-170DA5DDB388", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_helix_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EABD535C-4802-4046-9C48-360E502182CC", "versionEndExcluding": "n17eta8w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_helix:-:*:*:*:*:*:*:*", "matchCriteriaId": "9BD5DB5D-4ADF-4AC9-9774-8F36B3F2BDBF", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_l560_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "79500B6C-7820-4D3D-B877-D1DEDF157AE4", "versionEndExcluding": "n1het85w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_l560:-:*:*:*:*:*:*:*", "matchCriteriaId": "4FDA2BC8-0ABC-41EA-80BF-00B36564F0A1", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_l570_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0C758545-4CB9-4C32-88BB-68A328D4E953", "versionEndExcluding": "n1xet65w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*", "matchCriteriaId": "61CD2E9F-18D9-4D04-BA83-42653424A006", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_p50s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "8D755316-52CC-4B1C-B74F-765CE8DD2909", "versionEndExcluding": "n1ket46w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_p50s:-:*:*:*:*:*:*:*", "matchCriteriaId": "F583B121-A68C-463B-9D72-06061F74D007", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_p51s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D83AB324-9B0D-48AE-8BF7-3B8EB1BE2263", "versionEndExcluding": "n1vet50w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*", "matchCriteriaId": "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_p52s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "582A7C14-6E3E-4325-AD88-3651C327DE9E", "versionEndExcluding": "n27et36w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF0A6498-072B-4541-87E5-379ECC36EC77", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_s540_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4ED0783E-DF3F-4471-A511-7A5FAC2CE3BF", "versionEndExcluding": "gpet80ww", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_s540:-:*:*:*:*:*:*:*", "matchCriteriaId": "A9A8D286-D464-44C9-9716-2AC73328E9C7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_t550_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F34BE364-9A30-494E-B952-FE37B327DE4D", "versionEndExcluding": "n11et50w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_t550:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D79966D-08A3-428F-B4EC-CAAC8F4CF435", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_t560_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "09664C87-5CE2-4137-9B69-A5704F60A808", "versionEndExcluding": "n1ket46w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_t560:-:*:*:*:*:*:*:*", "matchCriteriaId": "84478711-E030-42CD-9B8A-0C54C8DB8128", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_t570_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D5DBA9C5-A462-4193-AC52-1BF3D17A3A7E", "versionEndExcluding": "n1vet50w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEC1A912-C9FA-4D12-97A3-1D53B8209314", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_t580_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9391590D-0F7E-4103-8027-39E96014811B", "versionEndExcluding": "n27et36w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_1_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "93C64E55-CDB6-457A-94F5-94921FC0C650", "versionEndExcluding": "n1let86w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "C6E9591E-5A71-4BBD-9C25-CDDF8DB500F3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x1_tablet_gen_2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0EDEB801-9BF8-46E3-82BB-6A696439993D", "versionEndExcluding": "n1oet50w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "61D4520A-47B3-4E2A-9A1D-9738EB8167A6", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_w540_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "04436B75-6E92-4632-BF03-0802B34EDE23", "versionEndExcluding": "gnet92ww", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_w540:-:*:*:*:*:*:*:*", "matchCriteriaId": "B72A36A5-900B-4FFD-AF2D-FECD35E15AF5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_w541_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CF27E2E8-B2DC-4520-96E4-B7F8C9B33FD4", "versionEndExcluding": "gnet92ww", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_w541:-:*:*:*:*:*:*:*", "matchCriteriaId": "86A51FFE-257C-4609-BC14-C0DE0969E7F9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_w550s_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C976E2D8-6BCD-44B0-9B55-58A12A9E894F", "versionEndExcluding": "n11et50w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_w550s:-:*:*:*:*:*:*:*", "matchCriteriaId": "23267973-5F08-43C5-9C92-F429B84D3245", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_3rd_gen_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E3E892D3-95D5-4F3D-87FA-F0415F16FA26", "versionEndExcluding": "n14et52w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_3rd_gen:-:*:*:*:*:*:*:*", "matchCriteriaId": "86F4EB0E-B4C9-4FC1-987F-8EE359F17172", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_4th_gen_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4452B8F5-79A9-4A16-9DB2-E0DB4DC0DC92", "versionEndExcluding": "n1fet70w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_4th_gen:-:*:*:*:*:*:*:*", "matchCriteriaId": "490D663D-DAE1-483D-A150-5528A057C142", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_kabylake_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "365AADA5-87BB-4C53-B540-9BFCD1F95470", "versionEndExcluding": "n1met55w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_kabylake:-:*:*:*:*:*:*:*", "matchCriteriaId": "5766DCDC-2CD2-40C1-B686-B896C8730A55", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x1_carbon_5th_gen_skylake_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "7F13D751-1511-4BFB-9551-BE6786F4578A", "versionEndExcluding": "n1met55w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_5th_gen_skylake:-:*:*:*:*:*:*:*", "matchCriteriaId": "1DF6298F-C8BF-4DF3-BF08-6394FEC4F436", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "CC700809-DE88-4997-B5E1-4142E3DE0493", "versionEndExcluding": "n1fet70w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "45044ABC-76BF-475E-9B12-A77901172E5D", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "39709F9F-5E58-4689-BB4D-06A96E5D4D67", "versionEndExcluding": "n1net47w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC29C336-3A92-4A55-8764-0A99CDA9F5F0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x1_yoga_gen_3_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "E5BBC6FC-2696-4308-9714-28F439E8A338", "versionEndExcluding": "n25et50w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x250_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5DD98844-9090-4E42-BFC4-BE884E929AC9", "versionEndExcluding": "n10et58w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x250:-:*:*:*:*:*:*:*", "matchCriteriaId": "AEA076E5-D554-4570-B5E3-FE78CEC024B4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x280_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F50957B2-E528-425E-872A-A0FBB3FBAA8E", "versionEndExcluding": "n20et44w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*", "matchCriteriaId": "ABEA1745-32A2-4261-8572-12D1565E3A55", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_x390_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EECB7D25-5EDA-4662-BCCE-ED11F1A94143", "versionEndExcluding": "n2let60w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2E05FC7-F957-4FE0-A9F1-E125419B7BFD", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_11e_yoga_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1DE1715E-47E6-4812-86CD-11E86E525516", "versionEndExcluding": "n15et78w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_11e_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9F6E6BD-D5BF-47FA-866D-23179362F650", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_yoga_15_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B1C33C59-F2F9-4134-8C13-103246896E76", "versionEndExcluding": "n19et61w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_15:-:*:*:*:*:*:*:*", "matchCriteriaId": "9052750D-3481-46A1-B1C5-EABB56DDD4E0", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:lenovo:thinkpad_yoga_260_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "89713A33-B49B-489F-891D-4EE40298AA8A", "versionEndExcluding": "n1get98w", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_260:-:*:*:*:*:*:*:*", "matchCriteriaId": "051E3938-B988-40E3-B8FB-725886A1EA6E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code." }, { "lang": "es", "value": "Durante una auditor\u00eda de seguridad interna del producto se descubri\u00f3 una posible vulnerabilidad debida al uso de los servicios de arranque en el manejador SMI SmmOEMInt15 en algunos modelos de ThinkPad que podr\u00eda ser explotada por un atacante con privilegios elevados que podr\u00eda permitir la ejecuci\u00f3n de c\u00f3digo" } ], "id": "CVE-2022-1107", "lastModified": "2024-11-21T06:40:03.013", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.2, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, "exploitabilityScore": 3.9, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "psirt@lenovo.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2022-04-22T21:15:10.300", "references": [ { "source": "psirt@lenovo.com", "tags": [ "Vendor Advisory" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-84943" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-84943" } ], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "psirt@lenovo.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-20" }, { "lang": "en", "value": "CWE-269" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2021-04-13 21:15
Modified
2024-11-21 06:21
Severity ?
5.5 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Summary
A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:lenovo:power_management_driver:*:*:*:*:*:windows_10:*:*", "matchCriteriaId": "3A801AF5-BEDF-4FA9-93A0-F742CB85488A", "versionEndExcluding": "1.67.17.54", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_11e_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E68C4CB-7316-4FD2-A89B-123E5014AE1E", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_11e_yoga_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "4AA392C0-4D5A-4440-8910-C248F17077CC", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_13_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "59C2F35D-79A1-4671-BA7E-4AAF2BA13744", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_25:-:*:*:*:*:*:*:*", "matchCriteriaId": "1EE4830F-2C86-4DF0-8E37-D2894B4518FF", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a275:-:*:*:*:*:*:*:*", "matchCriteriaId": "577AACCC-001A-4C73-B036-CA942080304F", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a285:-:*:*:*:*:*:*:*", "matchCriteriaId": "259D895B-9968-41CF-8DB4-FAAB5A4C04AF", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a475:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE1D9347-9561-45A3-A434-3A0802BC8953", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a485:-:*:*:*:*:*:*:*", "matchCriteriaId": "37B871C5-73F4-43FF-BCF1-B9B1B52FAC31", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e14:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD0A0B6A-7932-4811-BC62-575B3FA9F86C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e14_gen2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E042C00A-D60D-447E-A0F5-8E19A06D4E59", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e15:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E9EC7DC-D272-4986-8320-B5920E3EC2F5", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e15_gen2:-:*:*:*:*:*:*:*", "matchCriteriaId": "CEEA640B-96BB-440A-8C2C-1A1C4D97CB11", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e470:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEB3B20B-F86E-4D83-BFD1-A70BE06B55CB", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e470c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A5C0CDE-30B4-4A99-BA7C-31C1D1C72E3B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e475:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE7A17E2-C8F2-4AF0-BF87-14B3AD0EF75A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e480:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F18F059-A701-41EE-B711-46DC7B5A1389", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e490:-:*:*:*:*:*:*:*", "matchCriteriaId": "3647F05A-FE86-494A-BA16-0009C7ACB799", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e495:-:*:*:*:*:*:*:*", "matchCriteriaId": "5863D590-FE1A-4731-9E05-AEBF57D9796F", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e570:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE35D0C7-721B-4AD7-A483-E1671C00C227", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e570c:-:*:*:*:*:*:*:*", "matchCriteriaId": "137B926A-28AE-4C6D-AD98-AE9EBEE14222", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e575:-:*:*:*:*:*:*:*", "matchCriteriaId": "F16C4BFE-5054-470D-9BF8-8A8B2DE3F4E0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e580:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E574BA8-65D9-4836-B448-254D613DA86E", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e590:-:*:*:*:*:*:*:*", "matchCriteriaId": "D03AC004-4251-47AB-AE46-2BDD93F884D9", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e595:-:*:*:*:*:*:*:*", "matchCriteriaId": "29BA84C7-B436-4073-B04F-CD83773B3A36", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13:-:*:*:*:*:*:*:*", "matchCriteriaId": "99429424-2602-458B-BB57-C2E161005587", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "2DC30C8B-425F-4D72-922C-C68237E0D408", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "3E560943-6A00-4423-91F3-FBBBBB978F6B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "1295E4F8-431A-43ED-8104-DBBD0CDB1978", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_yoga_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFF0BBFF-9649-4778-9812-767CFB05CF01", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_yoga_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "0CB43443-ED65-4CF5-8FDA-3BCC1E2BD5A2", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l14_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0528272-3E6D-41A6-B87D-66C3DB4E1B41", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l14_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CE86BB2-232D-4DD9-9630-EA6517C64EB1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l15_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "658E6C1D-7C9D-4934-A232-38F7A0809328", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l15_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "77DDB8D3-F2BD-42AB-B927-D38FB54EE902", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l380:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0FFC7C4-2CAF-440A-8ED8-F25EA19F86C1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l380_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "2187E37E-E3D6-467A-934C-D5613FBF8641", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l390:-:*:*:*:*:*:*:*", "matchCriteriaId": "072FAC2E-2349-465C-96C0-C24E3891A7B3", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l390_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "17DD928B-F0BF-44F1-9EA4-DC82233A2E69", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l470:-:*:*:*:*:*:*:*", "matchCriteriaId": "0930094D-D5E5-4941-8C0C-1C8208310D68", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l480:-:*:*:*:*:*:*:*", "matchCriteriaId": "146462F0-69DA-4583-84C5-E1F2CE27E274", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l490:-:*:*:*:*:*:*:*", "matchCriteriaId": "EFE6D03B-0689-482E-8034-D7DC06249F0A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*", "matchCriteriaId": "61CD2E9F-18D9-4D04-BA83-42653424A006", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l580:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3245C2B-CED0-442E-ADE4-240F77D8AEC2", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l590:-:*:*:*:*:*:*:*", "matchCriteriaId": "82885E0E-257F-4F3F-B16B-35C9FA8D349B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p1:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF379C36-AD7A-4C89-9636-2EC418D34D59", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p1_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "F47363A2-D794-4A61-8F53-8DB0C6139235", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p1_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5FCBD54-3BF7-4F72-93B8-7205721E0E9A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p14s_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "C07EE7CC-32C6-4470-8A2C-BF6DF6E6E917", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p14s_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE970F53-856F-4DFF-B845-A8C5A8B14C90", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p15_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5FD8941-85F8-404B-93A8-3B5A0E0C0A9B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p15s_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC564275-320C-46E5-9B2F-DE795C4FB9CB", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p15s_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "A4AE8F28-A87C-4F62-951D-92EE9952E4B1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p15v_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "82F7266E-3C5C-4936-B43F-4860E09FED09", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p17_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "FB689F79-18B4-46A4-967C-E95DBE29A88C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p43s:-:*:*:*:*:*:*:*", "matchCriteriaId": "B74FF429-1EB1-46EC-A2CC-0A250D727049", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p51:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A724CF4-587A-4475-B27B-ACD99FC3F7E8", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*", "matchCriteriaId": "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p52:-:*:*:*:*:*:*:*", "matchCriteriaId": "5AEFFA8C-6EA1-4DD4-A6C0-9EDCE6A7D5F1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF0A6498-072B-4541-87E5-379ECC36EC77", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p53:-:*:*:*:*:*:*:*", "matchCriteriaId": "D79A7D7F-7F46-4AD8-B90F-79E43B410E75", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p53s:-:*:*:*:*:*:*:*", "matchCriteriaId": "602E98D1-5EC0-4982-BD0A-F475C0D1098A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p71:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF50A012-EFAE-485E-AADB-7D0AADEF21AC", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p72:-:*:*:*:*:*:*:*", "matchCriteriaId": "37552828-D225-4FCD-B762-A099A63E38E5", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p73:-:*:*:*:*:*:*:*", "matchCriteriaId": "5456AA95-094C-461C-85D4-22BDD23DF826", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_r14:-:*:*:*:*:*:*:*", "matchCriteriaId": "438ACF29-9418-42FD-B4AB-F67A80A52C32", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_r14_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C5A3C94-3133-4FA8-AAA3-14D7CBF216B0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_r480:-:*:*:*:*:*:*:*", "matchCriteriaId": "620B705F-9030-410B-811C-437D4358FED4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s1_gen_4:-:*:*:*:*:*:*:*", "matchCriteriaId": "EAF9FA1F-195B-4C65-A6C1-E7C2B2BB8ECF", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF9DD540-02AF-4069-AC9D-FDE554471E88", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "5BE17F4C-2D95-4677-A8E7-A3B840EE3EAE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF3A2ACE-E9E9-4A93-9543-044096A8BAFE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "392936BA-C4E0-46BD-A677-E6F537932665", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B2279C8-0F44-4CA3-9AED-F31E3C3327D8", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s3_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC3319D1-F0B2-4E48-B55D-90E7AD5123BB", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s5_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "394BE953-1B73-4F6B-86FF-54DD6FF9CD63", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t14_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "602BF8DB-B3D2-4078-8369-0C4608468C25", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t14_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD6A601D-0427-453F-B4A8-4EB9C18A58C6", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t14s_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CEAF8E5-B937-41C8-8D74-4ABC4035A2B7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t14s_gen_2i:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8A7367D-61E8-4B04-A2C2-F669D2A61626", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t15_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "E39BCB18-BFAE-4590-A2E4-0C017DFBCD7A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t15_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF9FB9A3-B1B5-42FF-9B07-0245E54237E3", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t15g_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "667C012B-C203-45CD-9E12-CAF954D13CC0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t15p_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "01601852-005B-4654-BF5F-38925DF98F87", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*", "matchCriteriaId": "6515A024-F5A8-494F-BCB6-0DD2D1CA4EA7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8796BA28-2705-4798-A95C-A821BB941A03", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:*", "matchCriteriaId": "A93959B3-4DE0-4AD3-8242-BF0BB45FABF4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t480:-:*:*:*:*:*:*:*", "matchCriteriaId": "84F55DB9-1677-4E50-A8A6-AFCE2FB1E609", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t480s:-:*:*:*:*:*:*:*", "matchCriteriaId": "3249C664-2699-47D2-B17A-2B1EF24FCB05", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t490:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FEFD400-CED2-4F84-BEE0-02A81F3B333A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t490s:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B8B88F8-437C-4982-BBAA-ACC666522475", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t495:-:*:*:*:*:*:*:*", "matchCriteriaId": "59D1AB23-EF93-48F6-BB7C-BC809EB69163", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEC1A912-C9FA-4D12-97A3-1D53B8209314", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t590:-:*:*:*:*:*:*:*", "matchCriteriaId": "87D3F23E-1160-4B0A-91A0-80773DE4ECB3", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "160DE174-DB5E-4F76-91B2-5C9DC53AAC01", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "88244565-F518-4FEE-AE52-B713969981A8", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_7:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA9E3A81-C519-4A04-93E6-254913441558", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_8:-:*:*:*:*:*:*:*", "matchCriteriaId": "788D3256-B315-419E-8CC7-CDA244AC1840", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_9:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7BDB699-4344-4280-A241-AF6CDA850A16", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_extreme:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5B89E5E-808D-4500-A33D-3B86E8CB28D4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_extreme_2nd:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A78112B-6318-4E0C-8E45-BE660E7ABE0C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_extreme_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4A8860C-BD0D-4DC9-B430-DF3A23C5E523", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_nano_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "36E97E1F-97A5-4095-A015-E8CDBCCDB32F", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "61D4520A-47B3-4E2A-9A1D-9738EB8167A6", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CAC1F64-CE82-4519-8449-D47637E1D6CE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_titanium_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD3134EF-5CFD-4CCE-8BA0-D0C149793FCA", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC29C336-3A92-4A55-8764-0A99CDA9F5F0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_4:-:*:*:*:*:*:*:*", "matchCriteriaId": "771425C2-D43E-4A67-93CF-C7DDAAB9DD82", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4F54ED9-4F61-44C6-9B2F-FF2902C60E28", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "33927CDB-57A6-4E91-BF0C-3F75BB2E69D7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x12:-:*:*:*:*:*:*:*", "matchCriteriaId": "829280DE-DE81-4CA2-A67A-C63474B352CE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x13_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "C147D3B6-C18F-46F8-AA70-E4B6AFA8D615", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x13_gen_2i:-:*:*:*:*:*:*:*", "matchCriteriaId": "677B63C9-C5DA-4711-B0EB-0796A54FEA74", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x13_yoga_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5A9CBB7-9624-4BB0-84AB-59752A0B5238", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x13_yoga_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "8ECF0472-8C1B-4E80-B632-9DBA2B1EACD1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x270:-:*:*:*:*:*:*:*", "matchCriteriaId": "94532BBF-D9CF-4164-BACA-AFEA8C35806C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*", "matchCriteriaId": "ABEA1745-32A2-4261-8572-12D1565E3A55", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x380_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5E1704F-6BB6-4B7C-ADE6-720533FB46E4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2E05FC7-F957-4FE0-A9F1-E125419B7BFD", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x390_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "30D40345-389F-4727-B549-1883C3454129", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x395:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9D5D2DC-32C0-4540-82AF-D97735383028", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_11e_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDB28CB4-CB95-4E19-B10F-961D1ED997C9", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_370:-:*:*:*:*:*:*:*", "matchCriteriaId": "30B0E5C1-5A7B-4310-A4D3-A12E1F059568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver\u0027s device object." }, { "lang": "es", "value": "Una vulnerabilidad de escalada de privilegios en Lenovo Power Management Driver para Windows 10, anteriores a versi\u00f3n 1.67.17.54, que podr\u00eda permitir el acceso no autorizado al objeto del dispositivo del controlador" } ], "id": "CVE-2021-3462", "lastModified": "2024-11-21T06:21:36.003", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0" }, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "psirt@lenovo.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2021-04-13T21:15:25.193", "references": [ { "source": "psirt@lenovo.com", "tags": [ "Vendor Advisory" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" } ], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-276" } ], "source": "psirt@lenovo.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2019-12-10 18:15
Modified
2024-11-21 04:46
Severity ?
4.4 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
4.4 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
4.4 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Summary
A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service.
References
▼ | URL | Tags | |
---|---|---|---|
psirt@lenovo.com | http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html | Exploit, Third Party Advisory | |
psirt@lenovo.com | https://support.lenovo.com/solutions/LEN-29334 | Mitigation, Vendor Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html | Exploit, Third Party Advisory | |
af854a3a-2127-422b-91ae-364da2661108 | https://support.lenovo.com/solutions/LEN-29334 | Mitigation, Vendor Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:lenovo:power_management_driver:*:*:*:*:*:*:*:*", "matchCriteriaId": "CD76F9C4-0BF4-4443-A108-59A9D1DEAFE4", "versionEndExcluding": "1.67.17.48", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_13_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "59C2F35D-79A1-4671-BA7E-4AAF2BA13744", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_25:-:*:*:*:*:*:*:*", "matchCriteriaId": "1EE4830F-2C86-4DF0-8E37-D2894B4518FF", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a275:-:*:*:*:*:*:*:*", "matchCriteriaId": "577AACCC-001A-4C73-B036-CA942080304F", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a285:-:*:*:*:*:*:*:*", "matchCriteriaId": "259D895B-9968-41CF-8DB4-FAAB5A4C04AF", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a475:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE1D9347-9561-45A3-A434-3A0802BC8953", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a485:-:*:*:*:*:*:*:*", "matchCriteriaId": "37B871C5-73F4-43FF-BCF1-B9B1B52FAC31", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e14:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD0A0B6A-7932-4811-BC62-575B3FA9F86C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e15:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E9EC7DC-D272-4986-8320-B5920E3EC2F5", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e470:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEB3B20B-F86E-4D83-BFD1-A70BE06B55CB", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e470c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A5C0CDE-30B4-4A99-BA7C-31C1D1C72E3B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e475:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE7A17E2-C8F2-4AF0-BF87-14B3AD0EF75A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e480:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F18F059-A701-41EE-B711-46DC7B5A1389", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e490:-:*:*:*:*:*:*:*", "matchCriteriaId": "3647F05A-FE86-494A-BA16-0009C7ACB799", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e495:-:*:*:*:*:*:*:*", "matchCriteriaId": "5863D590-FE1A-4731-9E05-AEBF57D9796F", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e570:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE35D0C7-721B-4AD7-A483-E1671C00C227", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e570c:-:*:*:*:*:*:*:*", "matchCriteriaId": "137B926A-28AE-4C6D-AD98-AE9EBEE14222", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e575:-:*:*:*:*:*:*:*", "matchCriteriaId": "F16C4BFE-5054-470D-9BF8-8A8B2DE3F4E0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e580:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E574BA8-65D9-4836-B448-254D613DA86E", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e590:-:*:*:*:*:*:*:*", "matchCriteriaId": "D03AC004-4251-47AB-AE46-2BDD93F884D9", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e595:-:*:*:*:*:*:*:*", "matchCriteriaId": "29BA84C7-B436-4073-B04F-CD83773B3A36", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13:-:*:*:*:*:*:*:*", "matchCriteriaId": "99429424-2602-458B-BB57-C2E161005587", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "1295E4F8-431A-43ED-8104-DBBD0CDB1978", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l380:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0FFC7C4-2CAF-440A-8ED8-F25EA19F86C1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l380_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "2187E37E-E3D6-467A-934C-D5613FBF8641", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l390:-:*:*:*:*:*:*:*", "matchCriteriaId": "072FAC2E-2349-465C-96C0-C24E3891A7B3", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l390_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "17DD928B-F0BF-44F1-9EA4-DC82233A2E69", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l470:-:*:*:*:*:*:*:*", "matchCriteriaId": "0930094D-D5E5-4941-8C0C-1C8208310D68", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l480:-:*:*:*:*:*:*:*", "matchCriteriaId": "146462F0-69DA-4583-84C5-E1F2CE27E274", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l490:-:*:*:*:*:*:*:*", "matchCriteriaId": "EFE6D03B-0689-482E-8034-D7DC06249F0A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*", "matchCriteriaId": "61CD2E9F-18D9-4D04-BA83-42653424A006", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l580:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3245C2B-CED0-442E-ADE4-240F77D8AEC2", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l590:-:*:*:*:*:*:*:*", "matchCriteriaId": "82885E0E-257F-4F3F-B16B-35C9FA8D349B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p1:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF379C36-AD7A-4C89-9636-2EC418D34D59", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p1_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "F47363A2-D794-4A61-8F53-8DB0C6139235", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p43s:-:*:*:*:*:*:*:*", "matchCriteriaId": "B74FF429-1EB1-46EC-A2CC-0A250D727049", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p51:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A724CF4-587A-4475-B27B-ACD99FC3F7E8", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*", "matchCriteriaId": "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p52:-:*:*:*:*:*:*:*", "matchCriteriaId": "5AEFFA8C-6EA1-4DD4-A6C0-9EDCE6A7D5F1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF0A6498-072B-4541-87E5-379ECC36EC77", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p53:-:*:*:*:*:*:*:*", "matchCriteriaId": "D79A7D7F-7F46-4AD8-B90F-79E43B410E75", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p53s:-:*:*:*:*:*:*:*", "matchCriteriaId": "602E98D1-5EC0-4982-BD0A-F475C0D1098A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p7:-:*:*:*:*:*:*:*", "matchCriteriaId": "3947E3C6-AF95-4D89-90BE-D5883A51C17F", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p72:-:*:*:*:*:*:*:*", "matchCriteriaId": "37552828-D225-4FCD-B762-A099A63E38E5", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p73:-:*:*:*:*:*:*:*", "matchCriteriaId": "5456AA95-094C-461C-85D4-22BDD23DF826", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_r14:-:*:*:*:*:*:*:*", "matchCriteriaId": "438ACF29-9418-42FD-B4AB-F67A80A52C32", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_r480:-:*:*:*:*:*:*:*", "matchCriteriaId": "620B705F-9030-410B-811C-437D4358FED4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s1_gen_4:-:*:*:*:*:*:*:*", "matchCriteriaId": "EAF9FA1F-195B-4C65-A6C1-E7C2B2BB8ECF", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF9DD540-02AF-4069-AC9D-FDE554471E88", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "5BE17F4C-2D95-4677-A8E7-A3B840EE3EAE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "392936BA-C4E0-46BD-A677-E6F537932665", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s3_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC3319D1-F0B2-4E48-B55D-90E7AD5123BB", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s5_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "394BE953-1B73-4F6B-86FF-54DD6FF9CD63", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*", "matchCriteriaId": "6515A024-F5A8-494F-BCB6-0DD2D1CA4EA7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8796BA28-2705-4798-A95C-A821BB941A03", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:*", "matchCriteriaId": "A93959B3-4DE0-4AD3-8242-BF0BB45FABF4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t480:-:*:*:*:*:*:*:*", "matchCriteriaId": "84F55DB9-1677-4E50-A8A6-AFCE2FB1E609", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t480s:-:*:*:*:*:*:*:*", "matchCriteriaId": "3249C664-2699-47D2-B17A-2B1EF24FCB05", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t490:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FEFD400-CED2-4F84-BEE0-02A81F3B333A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t490s:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B8B88F8-437C-4982-BBAA-ACC666522475", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t495:-:*:*:*:*:*:*:*", "matchCriteriaId": "59D1AB23-EF93-48F6-BB7C-BC809EB69163", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEC1A912-C9FA-4D12-97A3-1D53B8209314", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t590:-:*:*:*:*:*:*:*", "matchCriteriaId": "87D3F23E-1160-4B0A-91A0-80773DE4ECB3", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "160DE174-DB5E-4F76-91B2-5C9DC53AAC01", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "88244565-F518-4FEE-AE52-B713969981A8", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_7:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA9E3A81-C519-4A04-93E6-254913441558", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_extreme:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5B89E5E-808D-4500-A33D-3B86E8CB28D4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_extreme_2nd:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A78112B-6318-4E0C-8E45-BE660E7ABE0C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "61D4520A-47B3-4E2A-9A1D-9738EB8167A6", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CAC1F64-CE82-4519-8449-D47637E1D6CE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC29C336-3A92-4A55-8764-0A99CDA9F5F0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_4:-:*:*:*:*:*:*:*", "matchCriteriaId": "771425C2-D43E-4A67-93CF-C7DDAAB9DD82", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x270:-:*:*:*:*:*:*:*", "matchCriteriaId": "94532BBF-D9CF-4164-BACA-AFEA8C35806C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*", "matchCriteriaId": "ABEA1745-32A2-4261-8572-12D1565E3A55", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x380_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5E1704F-6BB6-4B7C-ADE6-720533FB46E4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2E05FC7-F957-4FE0-A9F1-E125419B7BFD", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x390_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "30D40345-389F-4727-B549-1883C3454129", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x395:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9D5D2DC-32C0-4540-82AF-D97735383028", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_370:-:*:*:*:*:*:*:*", "matchCriteriaId": "30B0E5C1-5A7B-4310-A4D3-A12E1F059568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service." }, { "lang": "es", "value": "Ha sido reportada una posible vulnerabilidad en Lenovo Power Management Driver versiones anteriores a la versi\u00f3n 1.67.17.48, conllevando un desbordamiento de b\u00fafer que podr\u00eda causar una denegaci\u00f3n de servicio." } ], "id": "CVE-2019-6192", "lastModified": "2024-11-21T04:46:08.750", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "LOW", "cvssData": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0" }, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "psirt@lenovo.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2019-12-10T18:15:09.657", "references": [ { "source": "psirt@lenovo.com", "tags": [ "Exploit", "Third Party Advisory" ], "url": "http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html" }, { "source": "psirt@lenovo.com", "tags": [ "Mitigation", "Vendor Advisory" ], "url": "https://support.lenovo.com/solutions/LEN-29334" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Exploit", "Third Party Advisory" ], "url": "http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Mitigation", "Vendor Advisory" ], "url": "https://support.lenovo.com/solutions/LEN-29334" } ], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-120" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Vulnerability from fkie_nvd
Published
2021-04-13 21:15
Modified
2024-11-21 06:21
Severity ?
4.2 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
4.4 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
4.4 (Medium) - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Summary
A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error.
References
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:a:lenovo:power_management_driver:*:*:*:*:*:windows_10:*:*", "matchCriteriaId": "3A801AF5-BEDF-4FA9-93A0-F742CB85488A", "versionEndExcluding": "1.67.17.54", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:lenovo:thinkpad_11e_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E68C4CB-7316-4FD2-A89B-123E5014AE1E", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_11e_yoga_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "4AA392C0-4D5A-4440-8910-C248F17077CC", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_13_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "59C2F35D-79A1-4671-BA7E-4AAF2BA13744", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_25:-:*:*:*:*:*:*:*", "matchCriteriaId": "1EE4830F-2C86-4DF0-8E37-D2894B4518FF", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a275:-:*:*:*:*:*:*:*", "matchCriteriaId": "577AACCC-001A-4C73-B036-CA942080304F", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a285:-:*:*:*:*:*:*:*", "matchCriteriaId": "259D895B-9968-41CF-8DB4-FAAB5A4C04AF", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a475:-:*:*:*:*:*:*:*", "matchCriteriaId": "EE1D9347-9561-45A3-A434-3A0802BC8953", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_a485:-:*:*:*:*:*:*:*", "matchCriteriaId": "37B871C5-73F4-43FF-BCF1-B9B1B52FAC31", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e14:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD0A0B6A-7932-4811-BC62-575B3FA9F86C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e14_gen2:-:*:*:*:*:*:*:*", "matchCriteriaId": "E042C00A-D60D-447E-A0F5-8E19A06D4E59", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e15:-:*:*:*:*:*:*:*", "matchCriteriaId": "7E9EC7DC-D272-4986-8320-B5920E3EC2F5", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e15_gen2:-:*:*:*:*:*:*:*", "matchCriteriaId": "CEEA640B-96BB-440A-8C2C-1A1C4D97CB11", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e470:-:*:*:*:*:*:*:*", "matchCriteriaId": "DEB3B20B-F86E-4D83-BFD1-A70BE06B55CB", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e470c:-:*:*:*:*:*:*:*", "matchCriteriaId": "1A5C0CDE-30B4-4A99-BA7C-31C1D1C72E3B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e475:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE7A17E2-C8F2-4AF0-BF87-14B3AD0EF75A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e480:-:*:*:*:*:*:*:*", "matchCriteriaId": "0F18F059-A701-41EE-B711-46DC7B5A1389", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e490:-:*:*:*:*:*:*:*", "matchCriteriaId": "3647F05A-FE86-494A-BA16-0009C7ACB799", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e495:-:*:*:*:*:*:*:*", "matchCriteriaId": "5863D590-FE1A-4731-9E05-AEBF57D9796F", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e570:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE35D0C7-721B-4AD7-A483-E1671C00C227", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e570c:-:*:*:*:*:*:*:*", "matchCriteriaId": "137B926A-28AE-4C6D-AD98-AE9EBEE14222", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e575:-:*:*:*:*:*:*:*", "matchCriteriaId": "F16C4BFE-5054-470D-9BF8-8A8B2DE3F4E0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e580:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E574BA8-65D9-4836-B448-254D613DA86E", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e590:-:*:*:*:*:*:*:*", "matchCriteriaId": "D03AC004-4251-47AB-AE46-2BDD93F884D9", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_e595:-:*:*:*:*:*:*:*", "matchCriteriaId": "29BA84C7-B436-4073-B04F-CD83773B3A36", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13:-:*:*:*:*:*:*:*", "matchCriteriaId": "99429424-2602-458B-BB57-C2E161005587", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "2DC30C8B-425F-4D72-922C-C68237E0D408", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "3E560943-6A00-4423-91F3-FBBBBB978F6B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "1295E4F8-431A-43ED-8104-DBBD0CDB1978", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_yoga_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "CFF0BBFF-9649-4778-9812-767CFB05CF01", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l13_yoga_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "0CB43443-ED65-4CF5-8FDA-3BCC1E2BD5A2", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l14_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0528272-3E6D-41A6-B87D-66C3DB4E1B41", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l14_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "5CE86BB2-232D-4DD9-9630-EA6517C64EB1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l15_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "658E6C1D-7C9D-4934-A232-38F7A0809328", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l15_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "77DDB8D3-F2BD-42AB-B927-D38FB54EE902", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l380:-:*:*:*:*:*:*:*", "matchCriteriaId": "D0FFC7C4-2CAF-440A-8ED8-F25EA19F86C1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l380_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "2187E37E-E3D6-467A-934C-D5613FBF8641", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l390:-:*:*:*:*:*:*:*", "matchCriteriaId": "072FAC2E-2349-465C-96C0-C24E3891A7B3", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l390_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "17DD928B-F0BF-44F1-9EA4-DC82233A2E69", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l470:-:*:*:*:*:*:*:*", "matchCriteriaId": "0930094D-D5E5-4941-8C0C-1C8208310D68", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l480:-:*:*:*:*:*:*:*", "matchCriteriaId": "146462F0-69DA-4583-84C5-E1F2CE27E274", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l490:-:*:*:*:*:*:*:*", "matchCriteriaId": "EFE6D03B-0689-482E-8034-D7DC06249F0A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*", "matchCriteriaId": "61CD2E9F-18D9-4D04-BA83-42653424A006", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l580:-:*:*:*:*:*:*:*", "matchCriteriaId": "E3245C2B-CED0-442E-ADE4-240F77D8AEC2", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_l590:-:*:*:*:*:*:*:*", "matchCriteriaId": "82885E0E-257F-4F3F-B16B-35C9FA8D349B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p1:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF379C36-AD7A-4C89-9636-2EC418D34D59", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p1_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "F47363A2-D794-4A61-8F53-8DB0C6139235", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p1_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5FCBD54-3BF7-4F72-93B8-7205721E0E9A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p14s_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "C07EE7CC-32C6-4470-8A2C-BF6DF6E6E917", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p14s_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "AE970F53-856F-4DFF-B845-A8C5A8B14C90", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p15_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "E5FD8941-85F8-404B-93A8-3B5A0E0C0A9B", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p15s_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC564275-320C-46E5-9B2F-DE795C4FB9CB", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p15s_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "A4AE8F28-A87C-4F62-951D-92EE9952E4B1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p15v_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "82F7266E-3C5C-4936-B43F-4860E09FED09", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p17_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "FB689F79-18B4-46A4-967C-E95DBE29A88C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p43s:-:*:*:*:*:*:*:*", "matchCriteriaId": "B74FF429-1EB1-46EC-A2CC-0A250D727049", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p51:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A724CF4-587A-4475-B27B-ACD99FC3F7E8", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*", "matchCriteriaId": "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p52:-:*:*:*:*:*:*:*", "matchCriteriaId": "5AEFFA8C-6EA1-4DD4-A6C0-9EDCE6A7D5F1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF0A6498-072B-4541-87E5-379ECC36EC77", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p53:-:*:*:*:*:*:*:*", "matchCriteriaId": "D79A7D7F-7F46-4AD8-B90F-79E43B410E75", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p53s:-:*:*:*:*:*:*:*", "matchCriteriaId": "602E98D1-5EC0-4982-BD0A-F475C0D1098A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p71:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF50A012-EFAE-485E-AADB-7D0AADEF21AC", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p72:-:*:*:*:*:*:*:*", "matchCriteriaId": "37552828-D225-4FCD-B762-A099A63E38E5", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_p73:-:*:*:*:*:*:*:*", "matchCriteriaId": "5456AA95-094C-461C-85D4-22BDD23DF826", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_r14:-:*:*:*:*:*:*:*", "matchCriteriaId": "438ACF29-9418-42FD-B4AB-F67A80A52C32", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_r14_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C5A3C94-3133-4FA8-AAA3-14D7CBF216B0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_r480:-:*:*:*:*:*:*:*", "matchCriteriaId": "620B705F-9030-410B-811C-437D4358FED4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s1_gen_4:-:*:*:*:*:*:*:*", "matchCriteriaId": "EAF9FA1F-195B-4C65-A6C1-E7C2B2BB8ECF", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "BF9DD540-02AF-4069-AC9D-FDE554471E88", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "5BE17F4C-2D95-4677-A8E7-A3B840EE3EAE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "FF3A2ACE-E9E9-4A93-9543-044096A8BAFE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "392936BA-C4E0-46BD-A677-E6F537932665", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B2279C8-0F44-4CA3-9AED-F31E3C3327D8", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s3_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC3319D1-F0B2-4E48-B55D-90E7AD5123BB", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_s5_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "394BE953-1B73-4F6B-86FF-54DD6FF9CD63", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t14_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "602BF8DB-B3D2-4078-8369-0C4608468C25", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t14_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD6A601D-0427-453F-B4A8-4EB9C18A58C6", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t14s_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CEAF8E5-B937-41C8-8D74-4ABC4035A2B7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t14s_gen_2i:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8A7367D-61E8-4B04-A2C2-F669D2A61626", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t15_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "E39BCB18-BFAE-4590-A2E4-0C017DFBCD7A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t15_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF9FB9A3-B1B5-42FF-9B07-0245E54237E3", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t15g_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "667C012B-C203-45CD-9E12-CAF954D13CC0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t15p_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "01601852-005B-4654-BF5F-38925DF98F87", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*", "matchCriteriaId": "6515A024-F5A8-494F-BCB6-0DD2D1CA4EA7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:*", "matchCriteriaId": "8796BA28-2705-4798-A95C-A821BB941A03", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:*", "matchCriteriaId": "A93959B3-4DE0-4AD3-8242-BF0BB45FABF4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t480:-:*:*:*:*:*:*:*", "matchCriteriaId": "84F55DB9-1677-4E50-A8A6-AFCE2FB1E609", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t480s:-:*:*:*:*:*:*:*", "matchCriteriaId": "3249C664-2699-47D2-B17A-2B1EF24FCB05", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t490:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FEFD400-CED2-4F84-BEE0-02A81F3B333A", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t490s:-:*:*:*:*:*:*:*", "matchCriteriaId": "3B8B88F8-437C-4982-BBAA-ACC666522475", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t495:-:*:*:*:*:*:*:*", "matchCriteriaId": "59D1AB23-EF93-48F6-BB7C-BC809EB69163", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*", "matchCriteriaId": "BEC1A912-C9FA-4D12-97A3-1D53B8209314", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_t590:-:*:*:*:*:*:*:*", "matchCriteriaId": "87D3F23E-1160-4B0A-91A0-80773DE4ECB3", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "160DE174-DB5E-4F76-91B2-5C9DC53AAC01", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "88244565-F518-4FEE-AE52-B713969981A8", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_7:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA9E3A81-C519-4A04-93E6-254913441558", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_8:-:*:*:*:*:*:*:*", "matchCriteriaId": "788D3256-B315-419E-8CC7-CDA244AC1840", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_9:-:*:*:*:*:*:*:*", "matchCriteriaId": "B7BDB699-4344-4280-A241-AF6CDA850A16", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_extreme:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5B89E5E-808D-4500-A33D-3B86E8CB28D4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_extreme_2nd:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A78112B-6318-4E0C-8E45-BE660E7ABE0C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_extreme_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "C4A8860C-BD0D-4DC9-B430-DF3A23C5E523", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_nano_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "36E97E1F-97A5-4095-A015-E8CDBCCDB32F", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "61D4520A-47B3-4E2A-9A1D-9738EB8167A6", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CAC1F64-CE82-4519-8449-D47637E1D6CE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_titanium_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD3134EF-5CFD-4CCE-8BA0-D0C149793FCA", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "EC29C336-3A92-4A55-8764-0A99CDA9F5F0", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_4:-:*:*:*:*:*:*:*", "matchCriteriaId": "771425C2-D43E-4A67-93CF-C7DDAAB9DD82", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "D4F54ED9-4F61-44C6-9B2F-FF2902C60E28", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_6:-:*:*:*:*:*:*:*", "matchCriteriaId": "33927CDB-57A6-4E91-BF0C-3F75BB2E69D7", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x12:-:*:*:*:*:*:*:*", "matchCriteriaId": "829280DE-DE81-4CA2-A67A-C63474B352CE", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x13_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "C147D3B6-C18F-46F8-AA70-E4B6AFA8D615", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x13_gen_2i:-:*:*:*:*:*:*:*", "matchCriteriaId": "677B63C9-C5DA-4711-B0EB-0796A54FEA74", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x13_yoga_gen_1:-:*:*:*:*:*:*:*", "matchCriteriaId": "B5A9CBB7-9624-4BB0-84AB-59752A0B5238", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x13_yoga_gen_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "8ECF0472-8C1B-4E80-B632-9DBA2B1EACD1", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x270:-:*:*:*:*:*:*:*", "matchCriteriaId": "94532BBF-D9CF-4164-BACA-AFEA8C35806C", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*", "matchCriteriaId": "ABEA1745-32A2-4261-8572-12D1565E3A55", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x380_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5E1704F-6BB6-4B7C-ADE6-720533FB46E4", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*", "matchCriteriaId": "A2E05FC7-F957-4FE0-A9F1-E125419B7BFD", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x390_yoga:-:*:*:*:*:*:*:*", "matchCriteriaId": "30D40345-389F-4727-B549-1883C3454129", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_x395:-:*:*:*:*:*:*:*", "matchCriteriaId": "C9D5D2DC-32C0-4540-82AF-D97735383028", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_11e_gen_5:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDB28CB4-CB95-4E19-B10F-961D1ED997C9", "vulnerable": false }, { "criteria": "cpe:2.3:h:lenovo:thinkpad_yoga_370:-:*:*:*:*:*:*:*", "matchCriteriaId": "30B0E5C1-5A7B-4310-A4D3-A12E1F059568", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error." }, { "lang": "es", "value": "Una vulnerabilidad de desreferencia de puntero null en Lenovo Power Management Driver para Windows 10, anteriores a versi\u00f3n 1.67.17.54, que podr\u00eda causar que los sistemas experimenten un error de pantalla azul" } ], "id": "CVE-2021-3463", "lastModified": "2024-11-21T06:21:36.173", "metrics": { "cvssMetricV2": [ { "acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": { "accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 4.9, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0" }, "exploitabilityScore": 3.9, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false } ], "cvssMetricV31": [ { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 0.6, "impactScore": 3.6, "source": "psirt@lenovo.com", "type": "Secondary" }, { "cvssData": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary" } ] }, "published": "2021-04-13T21:15:25.257", "references": [ { "source": "psirt@lenovo.com", "tags": [ "Vendor Advisory" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" }, { "source": "af854a3a-2127-422b-91ae-364da2661108", "tags": [ "Vendor Advisory" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" } ], "sourceIdentifier": "psirt@lenovo.com", "vulnStatus": "Modified", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-476" } ], "source": "psirt@lenovo.com", "type": "Secondary" }, { "description": [ { "lang": "en", "value": "CWE-476" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
cve-2022-1107
Vulnerability from cvelistv5
Published
2022-04-22 20:30
Modified
2024-08-02 23:55
Severity ?
EPSS score ?
Summary
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
References
▼ | URL | Tags |
---|---|---|
https://support.lenovo.com/us/en/product_security/LEN-84943 | x_refsource_MISC |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
▼ | Lenovo | ThinkPad BIOS |
Version: various |
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T23:55:24.201Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-84943" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "ThinkPad BIOS", "vendor": "Lenovo", "versions": [ { "status": "affected", "version": "various" } ] } ], "descriptions": [ { "lang": "en", "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2022-04-29T14:00:16", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-84943" } ], "solutions": [ { "lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-84943." } ], "source": { "advisory": "LEN-84943", "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.0.9" }, "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@lenovo.com", "ID": "CVE-2022-1107", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "ThinkPad BIOS", "version": { "version_data": [ { "version_affected": "=", "version_value": "various" } ] } } ] }, "vendor_name": "Lenovo" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code." } ] }, "generator": { "engine": "Vulnogram 0.0.9" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-20 Improper Input Validation" } ] } ] }, "references": { "reference_data": [ { "name": "https://support.lenovo.com/us/en/product_security/LEN-84943", "refsource": "MISC", "url": "https://support.lenovo.com/us/en/product_security/LEN-84943" } ] }, "solution": [ { "lang": "en", "value": "Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-84943." } ], "source": { "advisory": "LEN-84943", "discovery": "UNKNOWN" } } } }, "cveMetadata": { "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2022-1107", "datePublished": "2022-04-22T20:30:50", "dateReserved": "2022-03-27T00:00:00", "dateUpdated": "2024-08-02T23:55:24.201Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2021-3462
Vulnerability from cvelistv5
Published
2021-04-13 20:41
Modified
2024-08-03 16:53
Severity ?
EPSS score ?
Summary
A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.
References
▼ | URL | Tags |
---|---|---|
https://support.lenovo.com/us/en/product_security/LEN-59174 | x_refsource_MISC |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
▼ | Lenovo | Power Management Driver for Windows 10 |
Version: unspecified < 1.67.17.54 |
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T16:53:17.876Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Power Management Driver for Windows 10", "vendor": "Lenovo", "versions": [ { "lessThan": "1.67.17.54", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "value": "Lenovo thanks Aobo Wang of Chaitin Security Research Lab for reporting these issues." } ], "descriptions": [ { "lang": "en", "value": "A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver\u0027s device object." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2021-04-13T20:41:44", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" } ], "solutions": [ { "lang": "en", "value": "Update to Lenovo Power Management Driver for Windows 10 version 1.67.17.54 or higher." } ], "source": { "advisory": "LEN-59174", "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.0.9" }, "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@lenovo.com", "ID": "CVE-2021-3462", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Power Management Driver for Windows 10", "version": { "version_data": [ { "version_affected": "\u003c", "version_value": "1.67.17.54" } ] } } ] }, "vendor_name": "Lenovo" } ] } }, "credit": [ { "lang": "eng", "value": "Lenovo thanks Aobo Wang of Chaitin Security Research Lab for reporting these issues." } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver\u0027s device object." } ] }, "generator": { "engine": "Vulnogram 0.0.9" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-276 Incorrect Default Permissions" } ] } ] }, "references": { "reference_data": [ { "name": "https://support.lenovo.com/us/en/product_security/LEN-59174", "refsource": "MISC", "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" } ] }, "solution": [ { "lang": "en", "value": "Update to Lenovo Power Management Driver for Windows 10 version 1.67.17.54 or higher." } ], "source": { "advisory": "LEN-59174", "discovery": "UNKNOWN" } } } }, "cveMetadata": { "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2021-3462", "datePublished": "2021-04-13T20:41:44", "dateReserved": "2021-03-23T00:00:00", "dateUpdated": "2024-08-03T16:53:17.876Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2021-3463
Vulnerability from cvelistv5
Published
2021-04-13 20:41
Modified
2024-08-03 16:53
Severity ?
EPSS score ?
Summary
A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error.
References
▼ | URL | Tags |
---|---|---|
https://support.lenovo.com/us/en/product_security/LEN-59174 | x_refsource_MISC |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
▼ | Lenovo | Power Management Driver for Windows 10 |
Version: unspecified < 1.67.17.54 |
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T16:53:17.802Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Power Management Driver for Windows 10", "vendor": "Lenovo", "versions": [ { "lessThan": "1.67.17.54", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "value": "Lenovo thanks Aobo Wang of Chaitin Security Research Lab for reporting these issues." } ], "descriptions": [ { "lang": "en", "value": "A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "cweId": "CWE-476", "description": "CWE-476 NULL Pointer Dereference", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2021-04-13T20:41:44", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" } ], "solutions": [ { "lang": "en", "value": "Update to Lenovo Power Management Driver for Windows 10 version 1.67.17.54 or higher." } ], "source": { "advisory": "LEN-59174", "discovery": "UNKNOWN" }, "x_generator": { "engine": "Vulnogram 0.0.9" }, "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@lenovo.com", "ID": "CVE-2021-3463", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Power Management Driver for Windows 10", "version": { "version_data": [ { "version_affected": "\u003c", "version_value": "1.67.17.54" } ] } } ] }, "vendor_name": "Lenovo" } ] } }, "credit": [ { "lang": "eng", "value": "Lenovo thanks Aobo Wang of Chaitin Security Research Lab for reporting these issues." } ], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error." } ] }, "generator": { "engine": "Vulnogram 0.0.9" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "CWE-476 NULL Pointer Dereference" } ] } ] }, "references": { "reference_data": [ { "name": "https://support.lenovo.com/us/en/product_security/LEN-59174", "refsource": "MISC", "url": "https://support.lenovo.com/us/en/product_security/LEN-59174" } ] }, "solution": [ { "lang": "en", "value": "Update to Lenovo Power Management Driver for Windows 10 version 1.67.17.54 or higher." } ], "source": { "advisory": "LEN-59174", "discovery": "UNKNOWN" } } } }, "cveMetadata": { "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2021-3463", "datePublished": "2021-04-13T20:41:44", "dateReserved": "2021-03-23T00:00:00", "dateUpdated": "2024-08-03T16:53:17.802Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }
cve-2019-6192
Vulnerability from cvelistv5
Published
2019-12-10 18:05
Modified
2024-09-17 04:20
Severity ?
EPSS score ?
Summary
A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service.
References
▼ | URL | Tags |
---|---|---|
https://support.lenovo.com/solutions/LEN-29334 | x_refsource_MISC | |
http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html | x_refsource_MISC |
Impacted products
Vendor | Product | Version | |
---|---|---|---|
▼ | Lenovo | Power Management driver |
Version: unspecified < 1.67.17.48 |
|
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-04T20:16:23.673Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "https://support.lenovo.com/solutions/LEN-29334" }, { "tags": [ "x_refsource_MISC", "x_transferred" ], "url": "http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "Power Management driver", "vendor": "Lenovo", "versions": [ { "lessThan": "1.67.17.48", "status": "affected", "version": "unspecified", "versionType": "custom" } ] } ], "datePublic": "2019-12-10T00:00:00", "descriptions": [ { "lang": "en", "value": "A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service." } ], "metrics": [ { "cvssV3_1": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } } ], "problemTypes": [ { "descriptions": [ { "description": "denial of service", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2019-12-12T02:06:06", "orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo" }, "references": [ { "tags": [ "x_refsource_MISC" ], "url": "https://support.lenovo.com/solutions/LEN-29334" }, { "tags": [ "x_refsource_MISC" ], "url": "http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html" } ], "solutions": [ { "lang": "en", "value": "Update to Lenovo Power Management driver version 1.67.17.48 or higher." } ], "source": { "advisory": "LEN-29334", "discovery": "EXTERNAL" }, "x_generator": { "engine": "Vulnogram 0.0.8" }, "x_legacyV4Record": { "CVE_data_meta": { "ASSIGNER": "psirt@lenovo.com", "DATE_PUBLIC": "2019-12-10T17:00:00.000Z", "ID": "CVE-2019-6192", "STATE": "PUBLIC" }, "affects": { "vendor": { "vendor_data": [ { "product": { "product_data": [ { "product_name": "Power Management driver", "version": { "version_data": [ { "affected": "\u003c", "version_affected": "\u003c", "version_value": "1.67.17.48" } ] } } ] }, "vendor_name": "Lenovo" } ] } }, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": { "description_data": [ { "lang": "eng", "value": "A potential vulnerability has been reported in Lenovo Power Management Driver versions prior to 1.67.17.48 leading to a buffer overflow which could cause a denial of service." } ] }, "generator": { "engine": "Vulnogram 0.0.8" }, "impact": { "cvss": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" } }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "denial of service" } ] } ] }, "references": { "reference_data": [ { "name": "https://support.lenovo.com/solutions/LEN-29334", "refsource": "MISC", "url": "https://support.lenovo.com/solutions/LEN-29334" }, { "name": "http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/155656/Lenovo-Power-Management-Driver-Buffer-Overflow.html" } ] }, "solution": [ { "lang": "en", "value": "Update to Lenovo Power Management driver version 1.67.17.48 or higher." } ], "source": { "advisory": "LEN-29334", "discovery": "EXTERNAL" } } } }, "cveMetadata": { "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "assignerShortName": "lenovo", "cveId": "CVE-2019-6192", "datePublished": "2019-12-10T18:05:17.706531Z", "dateReserved": "2019-01-11T00:00:00", "dateUpdated": "2024-09-17T04:20:49.230Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }