CVE-2020-8345CWE-427

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that…

High · published October 14, 2020

CVSS v3.1
7.3
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00424 · 35.6th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2020-10-14T21:25Z
EPSS history
Timeline
  • 14 OCT 21:25Z
    A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that…
    cvelistv5