PT-2023-12627 · Lenovo · Lenovo Hardwarescanplugin+1

Published 2023-10-24 · Updated 2023-10-30 · CVE-2022-0353

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Lenovo HardwareScanPlugin versions prior to 1.3.1.2 Lenovo Diagnostics versions prior to 4.45

Description A denial of service issue was reported that could allow a local user with administrative access to trigger a system crash.

Recommendations For Lenovo HardwareScanPlugin versions prior to 1.3.1.2, update to version 1.3.1.2 or later. For Lenovo Diagnostics versions prior to 4.45, update to version 4.45 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2022-0353

Affected Products

Lenovo Diagnostics

Lenovo Hardwarescanplugin

References · 5

• https://support.lenovo.com/us/en/product_security/LEN-102365 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-0353 · Vendor Advisory
• https://support.lenovo.com/us/en/product_security/LEN-94532 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0353 · Security Note
• https://twitter.com/CVEnew/status/1716920807278944284 · Twitter Post