lenovo hardware scan plugin

productUS

cpe:2.3:a:lenovo:hardware_scan_plugin:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

0
KEV-listed
0
public exploit
0
EPSS ≥ 10%
0
unpatched
0
critical
by severity
0critical2high1medium0low
updated 2026-10-30
01

vulnerabilities (3)

Related CVEs.

IDseverity exploitable
CVE-2022-3701UShigh7.8—
A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary cod…
CVE-2022-3702UShigh7.1—
A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local attacker to delete contents of an arbitra…
CVE-2022-3700USmedium6.3—
A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete…
02

weaknesses (2)

The flaw types (CWEs) most of these CVEs share.

  • CWE-367Time-of-check Time-of-use (TOCTOU) Race Condition3 CVEs
  • CWE-269Improper Privilege Management1 CVEs
03

sources (1)

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan