CVE-2021-3462CWE-276

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the…

Medium · published April 13, 2021

CVSS v3.1
5.5
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2021-04-13T20:41Z
EPSS history
Timeline
  • 13 APR 20:41Z
    A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the…
    cvelistv5