CVE-2022-3700 - A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files

Back Back to CVE browser

MEDIUM

A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files

Published Oct 27, 2023

6.3

MEDIUM

CVSS 3.1

EPSS 0.10%

Description

A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files.

Affected products

Vendor Lenovo Product Vantage SystemUpdate Plugin Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <2.0.0.213

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Vantage SystemUpdate Plugin

unaffected

Version	Status	Constraints
-	affected	<2.0.0.213

Remediation

Vendor solution

Update the Lenovo Vantage SystemUpdate Plugin to version 2.0.0.213.

Weaknesses (1)

CWE-367

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43058
Advisory
https://support.lenovo.com/us/en/product_security/LEN-94532
MitigationVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43058		Advisory
https://support.lenovo.com/us/en/product_security/LEN-94532		MitigationVendor Advisory