Vulnerability Description
A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | System Update | < 2022-02-25 |
References
- https://support.lenovo.com/us/en/product_security/LEN-76673Vendor Advisory
- https://www.infosec.tirol/cve-2022-0354/ExploitThird Party Advisory
- https://support.lenovo.com/us/en/product_security/LEN-76673Vendor Advisory
- https://www.infosec.tirol/cve-2022-0354/ExploitThird Party Advisory
FAQ
What is CVE-2022-0354?
CVE-2022-0354 is a vulnerability with a CVSS score of 7.3 (HIGH). A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a...
How severe is CVE-2022-0354?
CVE-2022-0354 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-0354?
Check the references section above for vendor advisories and patch information. Affected products include: Lenovo System Update.