System Update Plugin vulnerabilities

2 known vulnerabilities in System Update Plugin from Lenovo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Vantage HardwareScan Plugin: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2022-3702Oct 27, 2023Lenovo

  A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local attacker to delete contents of an arbitrary directory under certain conditions.

• 7.8 High severity

  Vantage SystemUpdate Plugin: Improper Privilege Management

  CVE-2022-3701Oct 27, 2023Lenovo

  A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.