Lenovo Driver Manager Path Hijacking Vulnerability Could Lead to Code Execution
CVE-2023-1577

7.8HIGH

Key Information:

Vendor
Lenovo
Status
Driver Manager
Vendor
CVE Published:
31 July 2024

Summary

A vulnerability exists in Lenovo Driver Manager that allows local users to exploit a path hijacking flaw. This can potentially lead to unauthorized code execution with elevated privileges, posing a significant security risk. This issue affects versions of Lenovo Driver Manager prior to 3.1.1307.1308, making it essential for users to update their software to mitigate the risks associated with this vulnerability.

Affected Version(s)

Driver Manager 0 < 3.1.1307.1308

References

https://iknow.lenovo.com.cn/detail/dc_415202.html

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Lenovo thanks Linke Lu for reporting CVE-2023-25496.
.