CVE-2020-8326

HIGH

Lenovo Drivers Management <2.7.1128.1046 - Privilege Escalation

Title source: llm

Description

An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://iknow.lenovo.com.cn/detail/dc_190088.html

Scores

CVSS v3 7.3

EPSS 0.0005

EPSS Percentile 15.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-428

Status published

Products (1)

lenovo/drivers_management < 2.7.1128.1046

Published Jul 24, 2020

Tracked Since Feb 18, 2026