CVE-2020-8317 in Drivers Management

Résumé

par MITRE

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Lenovo Group Ltd.
• Réserver: 28/01/2020
• Modérer: accepté
• Entrée: VDB-158986
• CPE: prêt
• CWE: CWE-426 (confirmé)
• CVSS: 7.3 (NVD)
• EPSS: 0.00058
• KEV: non
• Activités: très faible
• Secteur: Energy, Finance, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8317
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8317
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8317/