PT-2022-23734 · Lenovo · Lenovo Hardwarescanplugin+1

Published 2022-11-09 · Updated 2025-06-04 · CVE-2022-3699

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo HardwareScanPlugin versions prior to 1.3.1.2 Lenovo Diagnostics versions prior to 4.45

Description A privilege escalation issue was reported that could allow a local user to execute code with elevated privileges. This issue affects the Lenovo HardwareScanPlugin and Lenovo Diagnostics, potentially allowing a local user to gain system-level access.

Recommendations For Lenovo HardwareScanPlugin versions prior to 1.3.1.2, update to version 1.3.1.2 or later to resolve the issue. For Lenovo Diagnostics versions prior to 4.45, update to version 4.45 or later to resolve the issue.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-3699

Affected Products

Lenovo Diagnostics

Lenovo Hardwarescanplugin

References · 15

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2022_3699_lenovo_diagnostics_driver.rb · Exploit
• 🔥 https://github.com/alfarom256/CVE-2022-3699 · Exploit
• 🔥 https://github.com/estimated1337/lenovo_exec · Exploit
• https://osv.dev/vulnerability/CVE-2022-3699 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3699 · Security Note
• https://support.lenovo.com/us/en/product_security/LEN-102365 · Vendor Advisory
• https://support.lenovo.com/us/en/product_security/LEN-94532 · Vendor Advisory
• https://t.me/true_secator/7103 · Telegram Post
• https://t.me/freedomf0x/18316 · Telegram Post
• https://t.me/cibsecurity/72826 · Telegram Post
• https://t.me/cybersecuritytechnologies/7141 · Telegram Post
• https://twitter.com/CVEnew/status/1716925969192153364 · Twitter Post
• https://t.me/breachdetector/139197 · Telegram Post
• https://t.me/proxy_bar/1159 · Telegram Post
• https://twitter.com/cracbot/status/1717535380331765926 · Twitter Post