CVE-2020-8317 in Drivers Management

要約

〜によって MITRE

A DLL search path vulnerability was reported in Lenovo Drivers Management prior to version 2.7.1128.1046 that could allow an authenticated user to execute code with elevated privileges.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• 責任者: Lenovo Group Ltd.
• 予約する: 2020年01月28日
• モデレーション: 承諾済み
• エントリ: VDB-158986
• CPE: 準備完了
• CWE: CWE-426 (確認済み)
• CVSS: 7.3 (NVD)
• EPSS: 0.00058
• KEV: いいえ
• アクティビティ: 非常低い
• セクター: Transportation, Telecommunication, ...

ソース

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8317
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8317
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8317/