Unquoted Service Path Flaw in Lenovo Drivers Management
CVE-2020-8326

7.3HIGH

Key Information:

Vendor

Lenovo
Status
Drivers Management
Vendor
CVE Published:
24 July 2020

What is CVE-2020-8326?

An unquoted service path vulnerability was identified in Lenovo Drivers Management versions prior to 2.7.1128.1046. This flaw allows authenticated users to execute arbitrary code with elevated privileges, potentially compromising the security and integrity of the system. Proper configuration and updating to the latest software version are crucial to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Drivers Management < 2.7.1128.1046

References

https://iknow.lenovo.com.cn/detail/dc_190088.html
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Jinwei Chen of Bangcle Security for reporting this issue.
JSON
.