CVE-2020-8326 - An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges

Back Back to CVE browser

HIGH

An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges

Published Jul 24, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.42%

Description

An unquoted service path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.

Affected products

Vendor Lenovo Product Drivers Management Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <2.7.1128.1046

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Drivers Management

n/a

Version	Status	Constraints
unspecified	affected	<2.7.1128.1046

Remediation

Vendor solution

Update to Lenovo Drivers Management version 2.7.1128.1046 (or newer).

Weaknesses (1)

CWE-428

References (1)

https://iknow.lenovo.com.cn/detail/dc_190088.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://iknow.lenovo.com.cn/detail/dc_190088.html		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Jul 24, 2020

Updated Sep 17, 2024

Reserved Jan 28, 2020

Link CVE-2020-8326

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8326

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8326

ENISA EUVD

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a