Vantage vulnerabilities
9 known vulnerabilities in Vantage from Lenovo. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.0 High severity
Commercial Vantage: Improper Link Resolution Before File Access
During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.
- 7.1 High severity
Vantage: Improper Link Resolution Before File Access
An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.
- 7.1 High severity
Diagnostics: Improper Link Resolution Before File Access
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an
- 7.1 High severity
Vantage: Improper Neutralization of Argument Delimiters in a Command
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbitrary registry keys with elevated privileges.
- 7.1 High severity
Vantage: Improper Neutralization of Argument Delimiters in a Command
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify arbitrary registry keys with elevated privileges.
- 7.8 High severity
Vantage: Improper Neutralization of Argument Delimiters in a Command
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying specific registry locations.
- 7.8 High severity
Vantage: Improper Neutralization of Argument Delimiters in a Command
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifying an application configuration file.
- 7.8 High severity
Vantage: Execution with Unnecessary Privileges
An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devices which could allow a local attacker to elevate privileges on the system. This vulnerability only affects Vantage installed on these device
- 7.8 High severity
Vantage: Improper Certificate Validation
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated privileges.