CVE-2023-3112

Published: Oct 25, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an attacker with local access to execute code with elevated privileges.

Affected (2)

Products: Ellipticlabs: Ai Virtual Presence Sensor, Virtual Lock Sensor

Ellipticlabs

2 products

Ai Virtual Presence Sensor

Virtual Lock Sensor

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Ellipticlabs Ai Virtual Presence Sensor	Before 3.1.50719.1
Ellipticlabs Virtual Lock Sensor	Before 3.1.50719.1

Running on/with	Platform Versions
Lenovo Thinkpad T14 Gen 3	All versions

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

https://support.lenovo.com/us/en/product_security/LEN-128081

Source: psirt@lenovo.com

Vendor Advisory

https://support.lenovo.com/us/en/product_security/LEN-128081

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.