7.8

CVE-2021-3462

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Lenovo ≫ Power Management Driver SwPlatformwindows_10 Version < 1.67.17.54
   Lenovo ≫ Thinkpad 11e Gen 5 Version-
   Lenovo ≫ Thinkpad 11e Yoga Gen 6 Version-
   Lenovo ≫ Thinkpad 13 Gen 2 Version-
   Lenovo ≫ Thinkpad 25 Version-
   Lenovo ≫ Thinkpad A275 Version-
   Lenovo ≫ Thinkpad A285 Version-
   Lenovo ≫ Thinkpad A475 Version-
   Lenovo ≫ Thinkpad A485 Version-
   Lenovo ≫ Thinkpad E14 Version-
   Lenovo ≫ Thinkpad E14 Gen2 Version-
   Lenovo ≫ Thinkpad E15 Version-
   Lenovo ≫ Thinkpad E15 Gen2 Version-
   Lenovo ≫ Thinkpad E470 Version-
   Lenovo ≫ Thinkpad E470c Version-
   Lenovo ≫ Thinkpad E475 Version-
   Lenovo ≫ Thinkpad E480 Version-
   Lenovo ≫ Thinkpad E490 Version-
   Lenovo ≫ Thinkpad E495 Version-
   Lenovo ≫ Thinkpad E570 Version-
   Lenovo ≫ Thinkpad E570c Version-
   Lenovo ≫ Thinkpad E575 Version-
   Lenovo ≫ Thinkpad E580 Version-
   Lenovo ≫ Thinkpad E590 Version-
   Lenovo ≫ Thinkpad E595 Version-
   Lenovo ≫ Thinkpad L13 Version-
   Lenovo ≫ Thinkpad L13 Gen 1 Version-
   Lenovo ≫ Thinkpad L13 Gen 2 Version-
   Lenovo ≫ Thinkpad L13 Yoga Version-
   Lenovo ≫ Thinkpad L13 Yoga Gen 1 Version-
   Lenovo ≫ Thinkpad L13 Yoga Gen 2 Version-
   Lenovo ≫ Thinkpad L14 Gen 1 Version-
   Lenovo ≫ Thinkpad L14 Gen 2 Version-
   Lenovo ≫ Thinkpad L15 Gen 1 Version-
   Lenovo ≫ Thinkpad L15 Gen 2 Version-
   Lenovo ≫ Thinkpad L380 Version-
   Lenovo ≫ Thinkpad L380 Yoga Version-
   Lenovo ≫ Thinkpad L390 Version-
   Lenovo ≫ Thinkpad L390 Yoga Version-
   Lenovo ≫ Thinkpad L470 Version-
   Lenovo ≫ Thinkpad L480 Version-
   Lenovo ≫ Thinkpad L490 Version-
   Lenovo ≫ Thinkpad L570 Version-
   Lenovo ≫ Thinkpad L580 Version-
   Lenovo ≫ Thinkpad L590 Version-
   Lenovo ≫ Thinkpad P1 Version-
   Lenovo ≫ Thinkpad P1 Gen 2 Version-
   Lenovo ≫ Thinkpad P1 Gen 3 Version-
   Lenovo ≫ Thinkpad P14s Gen 1 Version-
   Lenovo ≫ Thinkpad P14s Gen 2 Version-
   Lenovo ≫ Thinkpad P15 Gen 1 Version-
   Lenovo ≫ Thinkpad P15s Gen 1 Version-
   Lenovo ≫ Thinkpad P15s Gen 2 Version-
   Lenovo ≫ Thinkpad P15v Gen 1 Version-
   Lenovo ≫ Thinkpad P17 Gen 1 Version-
   Lenovo ≫ Thinkpad P43s Version-
   Lenovo ≫ Thinkpad P51 Version-
   Lenovo ≫ Thinkpad P51s Version-
   Lenovo ≫ Thinkpad P52 Version-
   Lenovo ≫ Thinkpad P52s Version-
   Lenovo ≫ Thinkpad P53 Version-
   Lenovo ≫ Thinkpad P53s Version-
   Lenovo ≫ Thinkpad P71 Version-
   Lenovo ≫ Thinkpad P72 Version-
   Lenovo ≫ Thinkpad P73 Version-
   Lenovo ≫ Thinkpad R14 Version-
   Lenovo ≫ Thinkpad R14 Gen 2 Version-
   Lenovo ≫ Thinkpad R480 Version-
   Lenovo ≫ Thinkpad S1 Gen 4 Version-
   Lenovo ≫ Thinkpad S2 Gen 2 Version-
   Lenovo ≫ Thinkpad S2 Gen 5 Version-
   Lenovo ≫ Thinkpad S2 Gen 6 Version-
   Lenovo ≫ Thinkpad S2 Yoga Gen 5 Version-
   Lenovo ≫ Thinkpad S2 Yoga Gen 6 Version-
   Lenovo ≫ Thinkpad S3 Gen 2 Version-
   Lenovo ≫ Thinkpad S5 Gen 2 Version-
   Lenovo ≫ Thinkpad T14 Gen 1 Version-
   Lenovo ≫ Thinkpad T14 Gen 2 Version-
   Lenovo ≫ Thinkpad T14s Gen 1 Version-
   Lenovo ≫ Thinkpad T14s Gen 2i Version-
   Lenovo ≫ Thinkpad T15 Gen 1 Version-
   Lenovo ≫ Thinkpad T15 Gen 2 Version-
   Lenovo ≫ Thinkpad T15g Gen 1 Version-
   Lenovo ≫ Thinkpad T15p Gen 1 Version-
   Lenovo ≫ Thinkpad T470 Version-
   Lenovo ≫ Thinkpad T470p Version-
   Lenovo ≫ Thinkpad T470s Version-
   Lenovo ≫ Thinkpad T480 Version-
   Lenovo ≫ Thinkpad T480s Version-
   Lenovo ≫ Thinkpad T490 Version-
   Lenovo ≫ Thinkpad T490s Version-
   Lenovo ≫ Thinkpad T495 Version-
   Lenovo ≫ Thinkpad T570 Version-
   Lenovo ≫ Thinkpad T580 Version-
   Lenovo ≫ Thinkpad T590 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 5 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 6 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 7 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 8 Version-
   Lenovo ≫ Thinkpad X1 Carbon Gen 9 Version-
   Lenovo ≫ Thinkpad X1 Extreme Version-
   Lenovo ≫ Thinkpad X1 Extreme 2nd Version-
   Lenovo ≫ Thinkpad X1 Extreme Gen 3 Version-
   Lenovo ≫ Thinkpad X1 Nano Gen 1 Version-
   Lenovo ≫ Thinkpad X1 Tablet Gen 2 Version-
   Lenovo ≫ Thinkpad X1 Tablet Gen 3 Version-
   Lenovo ≫ Thinkpad X1 Titanium Gen 1 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 2 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 3 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 4 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 5 Version-
   Lenovo ≫ Thinkpad X1 Yoga Gen 6 Version-
   Lenovo ≫ Thinkpad X12 Version-
   Lenovo ≫ Thinkpad X13 Gen 1 Version-
   Lenovo ≫ Thinkpad X13 Gen 2i Version-
   Lenovo ≫ Thinkpad X13 Yoga Gen 1 Version-
   Lenovo ≫ Thinkpad X13 Yoga Gen 2 Version-
   Lenovo ≫ Thinkpad X270 Version-
   Lenovo ≫ Thinkpad X280 Version-
   Lenovo ≫ Thinkpad X380 Yoga Version-
   Lenovo ≫ Thinkpad X390 Version-
   Lenovo ≫ Thinkpad X390 Yoga Version-
   Lenovo ≫ Thinkpad X395 Version-
   Lenovo ≫ Thinkpad Yoga 11e Gen 5 Version-
   Lenovo ≫ Thinkpad Yoga 370 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.28
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
psirt@lenovo.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.