PT-2021-21232 · Lenovo · Lenovo Drivers Management

Published 2021-08-17 · Updated 2022-04-25 · CVE-2021-3633

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo Driver Management versions prior to 2.9.0719.1104

Description A DLL preloading issue allows privilege escalation.

Recommendations For versions prior to 2.9.0719.1104, update to version 2.9.0719.1104 or later to resolve the issue.

Exploit

Fix

Improper Verification of Cryptographic Signature

Uncontrolled Search Path Element

Weakness Enumeration

CWE-347

CWE-427

Related Identifiers

CVE-2021-3633

Affected Products

Lenovo Drivers Management

References · 4

• 🔥 https://iknow.lenovo.com.cn/detail/dc_198418.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-3633 · Security Note
• https://osv.dev/vulnerability/CVE-2021-3633 · Vendor Advisory
• https://t.me/cibsecurity/27435 · Telegram Post