CVE-2020-8318

Published: Apr 14, 2020Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with elevated privileges.

Affected (1)

Products: Lenovo: System Interface Foundation

Lenovo

1 product

System Interface Foundation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lenovo System Interface Foundation	Before 2.0.0.92

References (2)

https://support.lenovo.com/us/en/product_security/LEN-30401

Source: psirt@lenovo.com

MitigationVendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-30401

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

Timeline

No history available yet.