Description

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.

Related CPE's

a

lenovo

power_management_driver

*

*

*

*

*

windows_10

Vulnerable

h

lenovo

thinkpad_11e_gen_5

-

h

lenovo

thinkpad_11e_yoga_gen_6

-

h

lenovo

thinkpad_13_gen_2

-

h

lenovo

thinkpad_25

-

h

lenovo

thinkpad_a275

-

h

lenovo

thinkpad_a285

-

h

lenovo

thinkpad_a475

-

h

lenovo

thinkpad_a485

-

h

lenovo

thinkpad_e14

-

h

lenovo

thinkpad_e14_gen2

-

h

lenovo

thinkpad_e15

-

h

lenovo

thinkpad_e15_gen2

-

h

lenovo

thinkpad_e470

-

h

lenovo

thinkpad_e470c

-

h

lenovo

thinkpad_e475

-

h

lenovo

thinkpad_e480

-

h

lenovo

thinkpad_e490

-

h

lenovo

thinkpad_e495

-

h

lenovo

thinkpad_e570

-

h

lenovo

thinkpad_e570c

-

h

lenovo

thinkpad_e575

-

h

lenovo

thinkpad_e580

-

h

lenovo

thinkpad_e590

-

h

lenovo

thinkpad_e595

-

h

lenovo

thinkpad_l13

-

h

lenovo

thinkpad_l13_gen_1

-

h

lenovo

thinkpad_l13_gen_2

-

h

lenovo

thinkpad_l13_yoga

-

h

lenovo

thinkpad_l13_yoga_gen_1

-

h

lenovo

thinkpad_l13_yoga_gen_2

-

h

lenovo

thinkpad_l14_gen_1

-

h

lenovo

thinkpad_l14_gen_2

-

h

lenovo

thinkpad_l15_gen_1

-

h

lenovo

thinkpad_l15_gen_2

-

h

lenovo

thinkpad_l380

-

h

lenovo

thinkpad_l380_yoga

-

h

lenovo

thinkpad_l390

-

h

lenovo

thinkpad_l390_yoga

-

h

lenovo

thinkpad_l470

-

h

lenovo

thinkpad_l480

-

h

lenovo

thinkpad_l490

-

h

lenovo

thinkpad_l570

-

h

lenovo

thinkpad_l580

-

h

lenovo

thinkpad_l590

-

h

lenovo

thinkpad_p1

-

h

lenovo

thinkpad_p1_gen_2

-

h

lenovo

thinkpad_p1_gen_3

-

h

lenovo

thinkpad_p14s_gen_1

-

h

lenovo

thinkpad_p14s_gen_2

-

h

lenovo

thinkpad_p15_gen_1

-

h

lenovo

thinkpad_p15s_gen_1

-

h

lenovo

thinkpad_p15s_gen_2

-

h

lenovo

thinkpad_p15v_gen_1

-

h

lenovo

thinkpad_p17_gen_1

-

h

lenovo

thinkpad_p43s

-

h

lenovo

thinkpad_p51

-

h

lenovo

thinkpad_p51s

-

h

lenovo

thinkpad_p52

-

h

lenovo

thinkpad_p52s

-

h

lenovo

thinkpad_p53

-

h

lenovo

thinkpad_p53s

-

h

lenovo

thinkpad_p71

-

h

lenovo

thinkpad_p72

-

h

lenovo

thinkpad_p73

-

h

lenovo

thinkpad_r14

-

h

lenovo

thinkpad_r14_gen_2

-

h

lenovo

thinkpad_r480

-

h

lenovo

thinkpad_s1_gen_4

-

h

lenovo

thinkpad_s2_gen_2

-

h

lenovo

thinkpad_s2_gen_5

-

h

lenovo

thinkpad_s2_gen_6

-

h

lenovo

thinkpad_s2_yoga_gen_5

-

h

lenovo

thinkpad_s2_yoga_gen_6

-

h

lenovo

thinkpad_s3_gen_2

-

h

lenovo

thinkpad_s5_gen_2

-

h

lenovo

thinkpad_t14_gen_1

-

h

lenovo

thinkpad_t14_gen_2

-

h

lenovo

thinkpad_t14s_gen_1

-

h

lenovo

thinkpad_t14s_gen_2i

-

h

lenovo

thinkpad_t15_gen_1

-

h

lenovo

thinkpad_t15_gen_2

-

h

lenovo

thinkpad_t15g_gen_1

-

h

lenovo

thinkpad_t15p_gen_1

-

h

lenovo

thinkpad_t470

-

h

lenovo

thinkpad_t470p

-

h

lenovo

thinkpad_t470s

-

h

lenovo

thinkpad_t480

-

h

lenovo

thinkpad_t480s

-

h

lenovo

thinkpad_t490

-

h

lenovo

thinkpad_t490s

-

h

lenovo

thinkpad_t495

-

h

lenovo

thinkpad_t570

-

h

lenovo

thinkpad_t580

-

h

lenovo

thinkpad_t590

-

h

lenovo

thinkpad_x1_carbon_gen_5

-

h

lenovo

thinkpad_x1_carbon_gen_6

-

h

lenovo

thinkpad_x1_carbon_gen_7

-

h

lenovo

thinkpad_x1_carbon_gen_8

-

h

lenovo

thinkpad_x1_carbon_gen_9

-

h

lenovo

thinkpad_x1_extreme

-

h

lenovo

thinkpad_x1_extreme_2nd

-

h

lenovo

thinkpad_x1_extreme_gen_3

-

h

lenovo

thinkpad_x1_nano_gen_1

-

h

lenovo

thinkpad_x1_tablet_gen_2

-

h

lenovo

thinkpad_x1_tablet_gen_3

-

h

lenovo

thinkpad_x1_titanium_gen_1

-

h

lenovo

thinkpad_x1_yoga_gen_2

-

h

lenovo

thinkpad_x1_yoga_gen_3

-

h

lenovo

thinkpad_x1_yoga_gen_4

-

h

lenovo

thinkpad_x1_yoga_gen_5

-

h

lenovo

thinkpad_x1_yoga_gen_6

-

h

lenovo

thinkpad_x12

-

h

lenovo

thinkpad_x13_gen_1

-

h

lenovo

thinkpad_x13_gen_2i

-

h

lenovo

thinkpad_x13_yoga_gen_1

-

h

lenovo

thinkpad_x13_yoga_gen_2

-

h

lenovo

thinkpad_x270

-

h

lenovo

thinkpad_x280

-

h

lenovo

thinkpad_x380_yoga

-

h

lenovo

thinkpad_x390

-

h

lenovo

thinkpad_x390_yoga

-

h

lenovo

thinkpad_x395

-

h

lenovo

thinkpad_yoga_11e_gen_5

-

h

lenovo

thinkpad_yoga_370

-

References

https://support.lenovo.com/us/en/product_security/LEN-59174

Vendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-noinfo

[email protected]

Secondary
CWE-276

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-04-13T21:15:25.193

4 years ago

Last modified

2022-10-27T12:45:23.963

2 years ago