PT-2020-20109 · Lenovo · Lenovo System Update

Published 2020-09-15 · Updated 2022-04-25 · CVE-2020-8342

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo System Update versions prior to 5.07.0106

Description A race condition issue was reported that could allow escalation of privilege.

Recommendations For versions prior to 5.07.0106, update to version 5.07.0106 or later to resolve the issue.

Fix

Time Of Check To Time Of Use

Race Condition

Weakness Enumeration

CWE-367

CWE-362

Related Identifiers

CVE-2020-8342

Affected Products

Lenovo System Update

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-8342 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-42150 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8342 · Vendor Advisory