CVE-2020-8317CWE-426

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code…

High · published July 24, 2020

CVSS v3.1
7.3
EPSS
0%
Percentile
36.4
In the wild
Unconfirmed
What it is

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.4th percentile
Weakness
CWE-426 · Untrusted Search Path
Published
2020-07-24T16:10Z
EPSS history
Timeline
  • 24 JUL 16:10Z
    A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code…
    cvelistv5