Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:diagnostics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductDiagnostics (5128e293-52d5-5654-bf56-1f0b0cc18951)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-0827 vulnerable 2026-06-08 07:47:13.258687 Details available
HIGH (7.1)
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.
Published: 2026-04-15T12:27:45.354Z
Updated: 2026-04-15T13:48:06.089Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3699 vulnerable 2026-06-08 05:48:21.691757 Details available
HIGH (7.8)
A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 that could allow a local user to execute code with elevated privileges.
Published: 2023-10-24T20:48:23.213Z
Updated: 2024-09-17T14:17:40.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3698 vulnerable 2026-06-08 05:48:21.690374 Details available
MEDIUM (4.4)
A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and  Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash.
Published: 2023-10-24T20:40:56.631Z
Updated: 2024-09-17T14:18:07.679Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0353 vulnerable 2026-06-08 05:39:09.870994 Details available
MEDIUM (4.4)
A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and  Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash.
Published: 2023-10-24T20:39:21.969Z
Updated: 2024-09-11T18:48:59.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-8338 vulnerable 2026-06-08 05:27:16.321724 Details available
HIGH (7.8)
A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.
Published: 2020-10-14T21:25:20.000Z
Updated: 2024-08-04T09:56:28.465Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.