Unquoted Service Path Flaw in Lenovo Drivers Management
CVE-2020-8326

7.3HIGH

Key Information:

Vendor
Lenovo
Status
Drivers Management
Vendor
CVE Published:
24 July 2020

Summary

An unquoted service path vulnerability was identified in Lenovo Drivers Management versions prior to 2.7.1128.1046. This flaw allows authenticated users to execute arbitrary code with elevated privileges, potentially compromising the security and integrity of the system. Proper configuration and updating to the latest software version are crucial to mitigate this risk.

Affected Version(s)

Drivers Management < 2.7.1128.1046

References

https://iknow.lenovo.com.cn/detail/dc_190088.html
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Jinwei Chen of Bangcle Security for reporting this issue.
.