PT-2019-17982 · Lenovo · Lenovo Dynamic Power Reduction Utility

Published 2019-03-15 · Updated 2019-03-21 · CVE-2019-6149

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Lenovo Dynamic Power Reduction Utility versions prior to 2.2.2.0

Description An unquoted search path issue was identified that could allow a malicious user with local access to execute code with administrative privileges.

Recommendations For versions prior to 2.2.2.0, update to version 2.2.2.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2019-6149

Affected Products

Lenovo Dynamic Power Reduction Utility

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-6149 · Security Note
• https://support.lenovo.com/solutions/LEN-25674 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-6149 · Vendor Advisory
• http://securityfocus.com/bid/107438 · Note