Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:system_update_plugin:*:*:*:*:*:lenovo_vantage:*:*

part: a version: * update: *

VendorLenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e)
ProductSystem Update Plugin (fdef0cee-0f9e-5a67-9ecf-b6fc2e2d86bf)
Edition*
Language*
Software edition*
Target softwarelenovo_vantage
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-3702 vulnerable 2026-06-08 05:48:21.701062 Details available
MEDIUM (6.1)
A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local attacker to delete contents of an arbitrary directory under certain conditions.
Published: 2023-10-27T19:42:34.062Z
Updated: 2024-09-09T14:50:51.885Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3701 vulnerable 2026-06-08 05:48:21.698771 Details available
HIGH (7.8)
A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.
Published: 2023-10-27T19:38:49.759Z
Updated: 2024-09-09T14:54:51.401Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-3700 vulnerable 2026-06-08 05:48:21.696067 Details available
MEDIUM (6.1)
A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files.
Published: 2023-10-27T19:32:04.281Z
Updated: 2024-09-09T14:56:01.610Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.