Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Lenovo Vantage SystemUpdate Plugin 2.0.0.213 Clear all filters
TI-2022-03402 CVE-2022-3701 · GHSA-fgc2-w43g-3rcw

Time-of-check time-of-use race condition in Lenovo Vantage SystemUpdate Plugin

Priority LOW 35

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00127 Published 2023-10-27 Fixed in 2.0.0.213 CWE-367
TI-2022-03401 CVE-2022-3700 · GHSA-3g2w-rhvj-j46g

Time-of-check time-of-use race condition in Lenovo Vantage SystemUpdate Plugin

Priority LOW 27

A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.00111 Published 2023-10-27 Fixed in 2.0.0.213 CWE-367