CVE-2020-8317 in Drivers Management

الملخص

بحسب MITRE

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• مسؤول: Lenovo Group Ltd.
• حجز: 28/01/2020
• الاعتدال: تمت الموافقة
• إدخال: VDB-158986
• CPE: جاهز
• CWE: CWE-426 (مؤكد)
• CVSS: 7.3 (NVD)
• EPSS: 0.00058
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Energy, Telecommunication, ...

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8317
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8317
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8317/