lenovo vantage
ProduktUScpe:2.3:a:lenovo:vantage:*:*:*:*:*:*:*:*
Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.
0
KEV-gelistet
0
öffentlicher Exploit
0
EPSS ≥ 10%
0
ungepatcht
0
kritisch
nach Schweregrad
0critical1high3medium0low
aktualisiert 2026-10-29
01
Schwachstellen (10)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||||
|---|---|---|---|---|---|---|
| CVE-2020-8327US | high7.8 | — | ||||
A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that c… | ||||||
| CVE-2020-8316US | medium4.4 | — | ||||
A vulnerability was reported in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to read files on the system with elevated privileges. | ||||||
| CVE-2025-6232US | — | — | ||||
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifyin… | ||||||
| CVE-2025-6231US | — | — | ||||
An improper validation vulnerability was reported in Lenovo Vantage that under certain conditions could allow a local attacker to execute code with elevated permissions by modifyin… | ||||||
| CVE-2023-6044US | medium6.8 | — | ||||
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker with physical access to impersonate Lenovo Vantage Service and execute arbitra… | ||||||
| CVE-2025-6230US | medium5.3 | — | ||||
A SQL injection vulnerability was reported in Lenovo Vantage that could allow a local attacker to modify the local SQLite database and execute limited SQLite commands. | ||||||
| CVE-2023-6043US | — | — | ||||
A privilege escalation vulnerability was reported in Lenovo Vantage that could allow a local attacker to bypass integrity checks and execute arbitrary code with elevated privileges… | ||||||
| CVE-2026-1716US | — | — | ||||
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to delete arbi… | ||||||
| CVE-2026-1715US | — | — | ||||
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify arbi… | ||||||
| CVE-2026-1717US | — | — | ||||
An input validation vulnerability was reported in the LenovoProductivitySystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to termina… | ||||||
02
Schwächen (7)
Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.
- CWE-88Improper Neutralization of Argument Delimiters in a Command5 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
- CWE-269Improper Privilege Management1 CVEs
- CWE-290Authentication Bypass by Spoofing1 CVEs
- CWE-295Improper Certificate Validation1 CVEs
- CWE-428Unquoted Search Path or Element1 CVEs
- CWE-89Improper Neutralization of Special Elements used in an SQL Command1 CVEs
03
Datenquellen (1)
Welche Quellen diesen Datensatz belegen und wann.
- USNVD / CVE10 CVEs
scry
Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan