Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Lenovo Accessories and Display Manager 1.0.5.0.5 Clear all filters
TI-2024-05560 CVE-2024-6001 · GHSA-m8m3-3pmc-xj5p

Improper certificate validation in Lenovo Accessories and Display Manager

Priority LOW 37

An improper certificate validation vulnerability was reported in LADM that could allow a network attacker with the ability to redirect an update request to a remote server and execute code with elevated privileges.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00294 Published 2024-12-16 Fixed in 1.0.5.0.5 CWE-295
TI-2024-04435 CVE-2024-4762 · GHSA-vhcm-29fv-3vx5

Improper certificate validation in Lenovo Accessories and Display Manager

Priority LOW 35

An improper validation vulnerability was reported in the firmware update mechanism of LADM and LDCC that could allow a local attacker to escalate privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00149 Published 2024-12-16 Fixed in 1.0.5.0.5, 3.0.32161.0 CWE-295