CVE-2022-3701 - A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges

Back Back to CVE browser

HIGH

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges

Published Oct 27, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.12%

Description

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.

Affected products

Vendor Lenovo Product Vantage SystemUpdate Plugin Default
unaffected
- Version
  -
  Status
  affected
  Constraints
  <2.0.0.213

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Vantage SystemUpdate Plugin

unaffected

Version	Status	Constraints
-	affected	<2.0.0.213

Vendor Lenovo Product Vantage Systemupdate Plugin Default
n/a
- Version
  0
  Status
  affected
  Constraints
  <2.0.0.213

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Lenovo

Vantage Systemupdate Plugin

n/a

Version	Status	Constraints
0	affected	<2.0.0.213

Remediation

Vendor solution

Update the Lenovo Vantage SystemUpdate Plugin to version 2.0.0.213.

Weaknesses (2)

CWE-269

Improper Privilege Management

CWE-367

References (1)

https://support.lenovo.com/us/en/product_security/LEN-94532
MitigationVendor Advisory

Link	Providers	Tags
https://support.lenovo.com/us/en/product_security/LEN-94532		MitigationVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner lenovo

Published Oct 27, 2023

Updated Sep 9, 2024

Reserved Oct 26, 2022

Link CVE-2022-3701

CISA Vulnrichment

Updated Sep 9, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3701

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-3701