CVE-2021-3462

State: Published
Severity: 5.5 Medium
Published: Apr 13, 2021
Updated: Aug 3, 2024
Reserved: Mar 23, 2021

Description

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	lenovo

Weaknesses

CWE-276 Incorrect Default Permissions

Affected Products

Product	Versions
Power Management Driver for Windows 10Lenovo	before 1.67.17.54Affected

References

https://support.lenovo.com/us/en/product_security/LEN-59174

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.