CVE-2022-1109 - An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service

HIGH

An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service

Published Jan 20, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.34%

An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service.

Vendor Lenovo Product Leyun Default
unaffected
Affected
- Versions prior to 6.8.21.99

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Lenovo	Leyun	unaffected	Affected Versions prior to 6.8.21.99

Vendor solution

Upgrade to V6.8.21.99 or later

Weaknesses (1)

CWE-276

Incorrect Default Permissions

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-24452		Advisory
https://iknow.lenovo.com.cn/detail/dc_204380.html		Vendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Jan 20, 2023

Updated Apr 2, 2025

Reserved Mar 27, 2022

CISA Vulnrichment

Updated Apr 2, 2025

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner lenovo

Published Jan 20, 2023

Updated Apr 2, 2025

GitHub

No data