CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-0354

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.3%

CVSS Severity

CVSS v3 Score 7.3

CVSS v2 Score 7.2

References

Products affected by CVE-2022-0354

Lenovo » System Update » Version: N/A

cpe:2.3:a:lenovo:system_update:-
Lenovo » System Update » Version: 5.06.0027

cpe:2.3:a:lenovo:system_update:5.06.0027
Lenovo » System Update » Version: 5.06.0034

cpe:2.3:a:lenovo:system_update:5.06.0034
Lenovo » System Update » Version: 5.06.0043

cpe:2.3:a:lenovo:system_update:5.06.0043
Lenovo » System Update » Version: 5.07.0008

cpe:2.3:a:lenovo:system_update:5.07.0008
Lenovo » System Update » Version: 5.07.0013

cpe:2.3:a:lenovo:system_update:5.07.0013
Lenovo » System Update » Version: 5.07.0019

cpe:2.3:a:lenovo:system_update:5.07.0019
Lenovo » System Update » Version: 5.07.0072

cpe:2.3:a:lenovo:system_update:5.07.0072
Lenovo » System Update » Version: 5.07.0084

cpe:2.3:a:lenovo:system_update:5.07.0084
Lenovo » System Update » Version: 5.07.0088

cpe:2.3:a:lenovo:system_update:5.07.0088
Lenovo » System Update » Version: 5.07.0106

cpe:2.3:a:lenovo:system_update:5.07.0106
Lenovo » System Update » Version: 5.08.01.0005

cpe:2.3:a:lenovo:system_update:5.08.01.0005
Lenovo » System Update » Version: 5.08.02.25

cpe:2.3:a:lenovo:system_update:5.08.02.25

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-0354

Products

Pricing

Contact Us