CVE-2020-8317 in Drivers Management

Resumen

por MITRE

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Lenovo Group Ltd.
• Reservar: 2020-01-28
• Moderación: aceptado
• Artículo: VDB-158986
• CPE: listo
• CWE: CWE-426 (confirmado)
• CVSS: 7.3 (NVD)
• EPSS: 0.00058
• KEV: no
• Actividades: muy bajo
• Sector: Transportation, Government, ...

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8317
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8317
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8317/