PT-2023-12627 · Lenovo · Lenovo Hardwarescanplugin+1

Publicado 2023-10-24 · Atualizado 2023-10-30 · CVE-2022-0353

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Lenovo HardwareScanPlugin versions prior to 1.3.1.2 Lenovo Diagnostics versions prior to 4.45

Description A denial of service issue was reported that could allow a local user with administrative access to trigger a system crash.

Recommendations For Lenovo HardwareScanPlugin versions prior to 1.3.1.2, update to version 1.3.1.2 or later. For Lenovo Diagnostics versions prior to 4.45, update to version 4.45 or later.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2022-0353

Produtos afetados

Lenovo Diagnostics

Lenovo Hardwarescanplugin

Referências · 5

• https://twitter.com/CVEnew/status/1716920807278944284 · Publicação no Twitter
• https://support.lenovo.com/us/en/product_security/LEN-102365 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2022-0353 · Aviso do Fabricante
• https://support.lenovo.com/us/en/product_security/LEN-94532 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-0353 · Nota de Segurança