7.8

CVE-2021-3462

EPSS 0.12%
Published 13.04.2021 21:15:25
Last modified 21.11.2024 06:21:36
Source psirt@lenovo.com
Teams watchlist Login
Open Login

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.

Affected products Warnungen 0 Metrics 4 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Lenovo ≫ Power Management Driver SwPlatformwindows_10 Version < 1.67.17.54

   Lenovo ≫ Thinkpad 11e Gen 5 Version-
   Lenovo ≫ Thinkpad 11e Yoga Gen 6 Version-
   Lenovo ≫ Thinkpad 13 Gen 2 Version-
   Lenovo ≫ Thinkpad 25 Version-
   Lenovo ≫ Thinkpad A275 Version-
   Lenovo ≫ Thinkpad A285 Version-
   Lenovo ≫ Thinkpad A475 Version-
   Lenovo ≫ Thinkpad A485 Version-
   Lenovo ≫ Thinkpad E14 Version-
   Lenovo ≫ Thinkpad E14 Gen2 Version-
   Lenovo ≫ Thinkpad E15 Version-
   Lenovo ≫ Thinkpad E15 Gen2 Version-
   Lenovo ≫ Thinkpad E470 Version-
   Lenovo ≫ Thinkpad E470c Version-
   Lenovo ≫ Thinkpad E475 Version-
   Lenovo ≫ Thinkpad E480 Version-
   Lenovo ≫ Thinkpad E490 Version-
   Lenovo ≫ Thinkpad E495 Version-
   Lenovo ≫ Thinkpad E570 Version-
   Lenovo ≫ Thinkpad E570c Version-
   Lenovo ≫ Thinkpad E575 Version-
   Lenovo ≫ Thinkpad E580 Version-
   Lenovo ≫ Thinkpad E590 Version-
   Lenovo ≫ Thinkpad E595 Version-
   Lenovo ≫ Thinkpad L13 Version-
   Lenovo ≫ Thinkpad L13 Gen 1 Version-
   Lenovo ≫ Thinkpad L13 Gen 2 Version-
   Lenovo ≫ Thinkpad L13 Yoga Version-
   Lenovo ≫ Thinkpad L13 Yoga Gen 1 Version-
   Lenovo ≫ Thinkpad L13 Yoga Gen 2 Version-
   Lenovo ≫ Thinkpad L14 Gen 1 Version-
   Lenovo ≫ Thinkpad L14 Gen 2 Version-
   Lenovo ≫ Thinkpad L15 Gen 1 Version-
   Lenovo ≫ Thinkpad L15 Gen 2 Version-
   Lenovo ≫ Thinkpad L380 Version-
   Lenovo ≫ Thinkpad L380 Yoga Version-
   Lenovo ≫ Thinkpad L390 Version-
   Lenovo ≫ Thinkpad L390 Yoga Version-
   Lenovo ≫ Thinkpad L470 Version-
   Lenovo ≫ Thinkpad L480 Version-
   Lenovo ≫ Thinkpad L490 Version-
   Lenovo ≫ Thinkpad L570 Version-
   Lenovo ≫ Thinkpad L580 Version-
   Lenovo ≫ Thinkpad L590 Version-
   Lenovo ≫ Thinkpad P1 Version-
   Lenovo ≫ Thinkpad P1 Gen 2 Version-
   Lenovo ≫ Thinkpad P1 Gen 3 Version-
   Lenovo ≫ Thinkpad P14s Gen 1 Version-
   Lenovo ≫ Thinkpad P14s Gen 2 Version-
   Lenovo ≫ Thinkpad P15 Gen 1 Version-
   Lenovo ≫ Thinkpad P15s Gen 1 Version-
   Lenovo ≫ Thinkpad P15s Gen 2 Version-
   Lenovo ≫ Thinkpad P15v Gen 1 Version-
   Lenovo ≫ Thinkpad P17 Gen 1 Version-
   Lenovo ≫ Thinkpad P43s Version-
   Lenovo ≫ Thinkpad P51 Version-
   Lenovo ≫ Thinkpad P51s Version-
   Lenovo ≫ Thinkpad P52 Version-
   Lenovo ≫ Thinkpad P52s Version-
   Lenovo ≫ Thinkpad P53 Version-
   Lenovo ≫ Thinkpad P53s Version-
   Lenovo ≫ Thinkpad P71 Version-
   Lenovo ≫ Thinkpad P72 Version-
   Lenovo ≫ Thinkpad P73 Version-
   Lenovo ≫ Thinkpad R14 Version-
   Lenovo ≫ Thinkpad R14 Gen 2 Version-
   Lenovo ≫ Thinkpad R480 Version-
   Lenovo ≫ Thinkpad S1 Gen 4 Version-
   Lenovo ≫ Thinkpad S2 Gen 2 Version-
   Lenovo ≫ Thinkpad S2 Gen 5 Version-
   Lenovo ≫ Thinkpad S2 Gen 6 Version-
   Lenovo ≫ Thinkpad S2 Yoga Gen 5 Version-
   Lenovo ≫ Thinkpad S2 Yoga Gen 6 Version-
   Lenovo ≫ Thinkpad S3 Gen 2 Version-
   Lenovo ≫ Thinkpad S5 Gen 2 Version-
   Lenovo ≫ Thinkpad T14 Gen 1 Version-
   Lenovo ≫ Thinkpad T14 Gen 2 Version-
   Lenovo ≫ Thinkpad T14s Gen 1 Version-
   Lenovo ≫ Thinkpad T14s Gen 2i Version-
   Lenovo ≫ Thinkpad T15 Gen 1 Version-
   Lenovo ≫ Thinkpad T15 Gen 2 Version-
   Lenovo ≫ Thinkpad T15g Gen 1 Version-
   Lenovo ≫ Thinkpad T15p Gen 1 Version-
   Lenovo ≫ Thinkpad T470 Version-
   Lenovo ≫ Thinkpad T470p Version-
   Lenovo ≫ Thinkpad T470s Version-
   Lenovo ≫ Thinkpad T480 Version-
   Lenovo ≫ Thinkpad T480s Version-
   Lenovo ≫ Thinkpad T490 Version-
   Lenovo ≫ Thinkpad T490s Version-
   Lenovo ≫ Thinkpad T495 Version-
   Lenovo ≫ Thinkpad T570 Version-
   Lenovo ≫ Thinkpad T580 Version-
   Lenovo ≫ Thinkpad T590 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 5 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 6 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 7 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 8 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 9 Version-
   Lenovo ≫ Thinkpad X1 Extreme Version-
   Lenovo ≫ Thinkpad X1 Extreme 2nd Version-
   Lenovo ≫ Thinkpad X1 Extreme Gen 3 Version-
   Lenovo ≫ Thinkpad X1 Nano Gen 1 Version-
   Lenovo ≫ Thinkpad X1 Tablet Gen 2 Version-
   Lenovo ≫ Thinkpad X1 Tablet Gen 3 Version-
   Lenovo ≫ Thinkpad X1 Titanium Gen 1 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 2 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 3 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 4 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 5 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 6 Version-
   Lenovo ≫ Thinkpad X12 Version-
   Lenovo ≫ Thinkpad X13 Gen 1 Version-
   Lenovo ≫ Thinkpad X13 Gen 2i Version-
   Lenovo ≫ Thinkpad X13 Yoga Gen 1 Version-
   Lenovo ≫ Thinkpad X13 Yoga Gen 2 Version-
   Lenovo ≫ Thinkpad X270 Version-
   Lenovo ≫ Thinkpad X280 Version-
   Lenovo ≫ Thinkpad X380 Yoga Version-
   Lenovo ≫ Thinkpad X390 Version-
   Lenovo ≫ Thinkpad X390 Yoga Version-
   Lenovo ≫ Thinkpad X395 Version-
   Lenovo ≫ Thinkpad Yoga 11e Gen 5 Version-
   Lenovo ≫ Thinkpad Yoga 370 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.12%	0.28

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P
psirt@lenovo.com	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://support.lenovo.com/us/en/product_security/LEN-59174

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-3462

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-3462

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-3462

EUVD