Directory Permissions Management Vulnerability in Lenovo System Update
CVE-2022-4568

7HIGH

Key Information:

Vendor
Lenovo
Status
Lenovo System Update
Vendor
CVE Published:
1 May 2023

Summary

A vulnerability exists in Lenovo System Update that pertains to directory permissions management. This issue may allow an attacker to elevate their privileges, potentially leading to unauthorized access or manipulation of system files. Users are advised to apply available security updates to mitigate this risk.

Affected Version(s)

Lenovo System Update All versions prior to 5.08.01.0005

References

https://support.lenovo.com/us/en/product_security/LEN-103545

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Raphael Rosenast of Compass Security for reporting this issue.
.