Podatność CVE-2022-3701


Publikacja: 2023-10-27

Opis:

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.

Typ:

CWE-367

(Time-of-check Time-of-use (TOCTOU) Race Condition)

 Referencje:
https://support.lenovo.com/us/en/product_security/LEN-94532

Copyright 2024, cxsecurity.com

 

Back to Top