CVE-2022-0354

Exploit

EPSS 0.05%
Published 22.04.2022 21:15:10
Last modified 21.11.2024 06:38:26
Source psirt@lenovo.com
Teams watchlist Login
Open Login

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window.

Affected products Warnungen 0 Metrics 4 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Lenovo ≫ System Update Version < 2022-02-25

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.157

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C
psirt@lenovo.com	7.3	1.3	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

https://support.lenovo.com/us/en/product_security/LEN-76673

Vendor Advisory

https://www.infosec.tirol/cve-2022-0354/

Third Party Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2022-0354

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-0354

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-0354

EUVD