Описание
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.
Уязвимые конфигурации
Конфигурация 1Версия до 2.2.2.0 (исключая)
Одновременно
cpe:2.3:a:lenovo:dynamic_power_reduction:*:*:*:*:*:*:*:*
cpe:2.3:h:lenovo:thinkpad_x1_carbon:-:*:*:*:*:*:*:*
EPSS
Процентиль: 13%
0.00042
Низкий
6.7 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-428
Связанные уязвимости
CVSS3: 6.7
github
больше 3 лет назад
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.
EPSS
Процентиль: 13%
0.00042
Низкий
6.7 Medium
CVSS3
7.2 High
CVSS2
Дефекты
CWE-428