CVE-2020-8345

HIGH

Lenovo HardwareScan Plugin <1.0.46.11 - Privilege Escalation

Title source: llm

Description

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://support.lenovo.com/us/en/product_security/LEN-44421

Scores

CVSS v3 7.3

EPSS 0.0015

EPSS Percentile 35.6%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-427

Status published

Products (1)

lenovo/hardware_scan < 1.0.46.11

Published Oct 14, 2020

Tracked Since Feb 18, 2026