CVE-2019-6197 - A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges

Back Back to CVE browser

HIGH

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges

Published Jul 31, 2024

7.8

HIGH

CVSS 3.1

EPSS 0.14%

Description

A vulnerability was reported in Lenovo PC Manager prior to version 2.8.90.11211 that could allow a local attacker to escalate privileges.

Affected products

Vendor Lenovo Product PC Manager Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <2.8.90.11211

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

PC Manager

unaffected

Version	Status	Constraints
0	affected	<2.8.90.11211

Vendor Lenovo Product Pcmanager Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <2.8.90.11211

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Pcmanager

n/a

Version	Status	Constraints
0	affected	<2.8.90.11211

Remediation

Vendor solution

Update Lenovo PC Manager to version 2.8.90.11211 or later.

Weaknesses (1)

CWE-287

Improper Authentication

References (1)

https://iknow.lenovo.com.cn/detail/186945.html
Vendor Advisory

Link	Providers	Tags
https://iknow.lenovo.com.cn/detail/186945.html		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Jul 31, 2024

Updated Jul 31, 2024

Reserved Jan 11, 2019

Link CVE-2019-6197

CISA Vulnrichment

Updated Jul 31, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2019-6197

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-6197