PT-2023-13515 · Lenovo · Lenovo Hardwarescanplugin+1

Publicado 2023-10-24 · Atualizado 2023-10-30 · CVE-2022-3698

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Lenovo HardwareScanPlugin versions prior to 1.3.1.2 Lenovo Diagnostics versions prior to 4.45

Description A denial of service issue was reported that could allow a local user with administrative access to trigger a system crash.

Recommendations For Lenovo HardwareScanPlugin versions prior to 1.3.1.2, update to version 1.3.1.2 or later. For Lenovo Diagnostics versions prior to 4.45, update to version 4.45 or later.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2022-3698

Produtos afetados

Lenovo Diagnostics

Lenovo Hardwarescanplugin

Referências · 5

• https://support.lenovo.com/us/en/product_security/LEN-102365 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1716920806129689044 · Publicação no Twitter
• https://support.lenovo.com/us/en/product_security/LEN-94532 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-3698 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2022-3698 · Aviso do Fabricante