CVE-2023-1577

State
Published
Severity
7.8 High
Published
Jul 31, 2024
Updated
Aug 1, 2024
Reserved
Mar 22, 2023

Read the record on cve.org

Description

A path hijacking vulnerability was reported in Lenovo Driver Manager prior to version 3.1.1307.1308 that could allow a local user to execute code with elevated privileges.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hlenovo

Weaknesses

  • CWE-20 Improper Input Validation

Affected Products

ProductVersions
Driver ManagerLenovo
  • before 3.1.1307.1308Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.