Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Lenovo Vantage 4.0.49.0 Clear all filters
TI-2023-05565 CVE-2023-6044 · GHSA-pfm6-94m2-vphw

Authentication bypass by spoofing in Lenovo Vantage

Priority LOW 31

A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vantage Service and execute arbitrary code with elevated privileges.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00188 Published 2024-01-19 Fixed in 4.0.49.0 CWE-290
TI-2023-05564 CVE-2023-6043 · GHSA-rfg6-p6q6-8frj

Improper certificate validation in Lenovo Vantage

Priority LOW 35

A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00171 Published 2024-01-19 Fixed in 4.0.49.0 CWE-295