PT-2019-17982 · Lenovo · Lenovo Dynamic Power Reduction Utility

Publicado 2019-03-15 · Atualizado 2019-03-21 · CVE-2019-6149

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lenovo Dynamic Power Reduction Utility versions prior to 2.2.2.0

Description An unquoted search path issue was identified that could allow a malicious user with local access to execute code with administrative privileges.

Recommendations For versions prior to 2.2.2.0, update to version 2.2.2.0 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-428

Identificadores relacionados

CVE-2019-6149

Produtos afetados

Lenovo Dynamic Power Reduction Utility

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6149 · Nota de Segurança
• https://support.lenovo.com/solutions/LEN-25674 · Aviso do Fabricante
• http://securityfocus.com/bid/107438 · Nota
• https://osv.dev/vulnerability/CVE-2019-6149 · Aviso do Fabricante