CVE-2015-3320

Опубликовано: 16 апр. 2015

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to obtain keypress information by accessing debug output.

Ссылки

http://www.securityfocus.com/bid/74196
Third Party Advisory
VDB Entry
https://support.lenovo.com/us/en/product_security/usbenhancedkeyboard
Patch
Vendor Advisory
http://www.securityfocus.com/bid/74196
Third Party Advisory
VDB Entry
https://support.lenovo.com/us/en/product_security/usbenhancedkeyboard
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lenovo:usb_enhanced_performance_keyboard:*:*:*:*:*:*:*:*

Версия до 2.0.2.1 (включая)

EPSS

Процентиль: 19%

0.00062

Низкий

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-hw3v-rw3r-9pgj

github

больше 3 лет назад