HIGH🇬🇧 English

CVE-2023-3112

CVSS 7.8v3.1pub. 2023-10-25upd. 2024-11-21

A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an attacker with local access to execute code with elevated privileges.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Ellipticlabs Ai Virtual Presence Sensor

    APP
    Ellipticlabs
    < 3.1.50719.1

  • Ellipticlabs Virtual Lock Sensor

    APP
    Ellipticlabs
    < 3.1.50719.1

  • Lenovo Thinkpad T14 Gen 3

    HW
    Lenovo
    wszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2023-5078MEDIUM6.7ten sam produkt

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated...

CVE-2022-4574MEDIUM6.7ten sam produkt

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker wit...

CVE-2022-48189MEDIUM6.7ten sam produkt

An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with ...

CVE-2017-5638CRITICAL9.8⚠ KEVten sam vendor

The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect ex...

CVE-2021-3849CRITICAL9.8ten sam vendor

An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2...