CoreCVE
Back

MEDIUM

A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during installation if an attacker already has administrative privileges

Published Jun 9, 2020

Description

A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during installation if an attacker already has administrative privileges.

Affected products

Remediation

Vendor solution

To mitigate these vulnerabilities, Lenovo recommends installing Lenovo software updates through Lenovo Vantage, Lenovo System Update, or Windows Update. Updates delivered through Update Retriever, Thin Installer, and System Update are also not affected. Lenovo installation packages version 1.2.9.3 or later are not affected.

Weaknesses (1)

CWE-426

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner lenovo
Published Jun 9, 2020
Updated Sep 16, 2024
Reserved Jan 11, 2019
Link CVE-2019-6173

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2019-6173

Red Hat

No data

ENISA EUVD

Assigner lenovo
Published Jun 9, 2020
Updated Sep 16, 2024
Link EUVD-2019-15740

GitHub

No data