Privilege Escalation Vulnerability in Lenovo Power Management Driver for Windows 10
CVE-2021-3462

5.5MEDIUM

Key Information:

Vendor
Lenovo
Status
Power Management Driver For Windows 10
Vendor
CVE Published:
13 April 2021

Summary

A vulnerability exists in the Lenovo Power Management Driver for Windows 10 earlier than version 1.67.17.54 that enables privilege escalation. Attackers with unauthorized access could exploit this issue to interact with the driver's device object, potentially compromising the system's integrity. Users are advised to update their drivers to the latest version to mitigate the risks associated with this vulnerability.

Affected Version(s)

Power Management Driver for Windows 10 < 1.67.17.54

References

https://support.lenovo.com/us/en/product_security/LEN-59174
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Aobo Wang of Chaitin Security Research Lab for reporting these issues.
.