PT-2024-25347 · Lenovo · Lenovo Baiying

Ggid7788 · Published 2024-10-11 · Updated 2024-10-16 · CVE-2024-33579

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lenovo Baiying (affected versions not specified)

Description A DLL hijack issue was reported that could allow a local attacker to execute code with elevated privileges. The issue affects Lenovo products and has a high severity level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2024-33579

Affected Products

Lenovo Baiying

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-33579 · Security Note
• https://twitter.com/transilienceai/status/1845874199145140547 · Twitter Post
• https://twitter.com/transilienceai/status/1845874178626670920 · Twitter Post
• https://twitter.com/cracbot/status/1846068607853514958 · Twitter Post
• https://twitter.com/cracbot/status/1846430946238910857 · Twitter Post
• https://twitter.com/transilienceai/status/1845874169722163296 · Twitter Post
• https://twitter.com/transilienceai/status/1845874191100531163 · Twitter Post
• https://twitter.com/transilienceai/status/1845874158309409085 · Twitter Post
• https://iknow.lenovo.com.cn/detail/423563 · Note