high7.8
CVE-2022-3701
A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to e…
Impact
A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | System Update Plugin | before 2.0.0.213 |
| Lenovo | Hardware Scan Plugin | before 1.3.1.2 |
| Lenovo | Hardware Scan Addin | before 2.4.1.1 |