Vulnerability Details CVE-2019-6149
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.3%
CVSS Severity
CVSS v3 Score 6.7
CVSS v2 Score 7.2
References
Products affected by CVE-2019-6149
-
cpe:2.3:a:lenovo:dynamic_power_reduction:*
-
cpe:2.3:h:lenovo:thinkpad_x1_carbon:-