A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HLenovo Power Management Driver
APPLenovo< 1.67.17.54Lenovo Thinkpad 11e Gen 5
HWLenovoall versionsLenovo Thinkpad 11e Yoga Gen 6
HWLenovoall versionsLenovo Thinkpad 13 Gen 2
HWLenovoall versionsLenovo Thinkpad 25
HWLenovoall versionsLenovo Thinkpad A275
HWLenovoall versionsLenovo Thinkpad A285
HWLenovoall versionsLenovo Thinkpad A475
HWLenovoall versionsLenovo Thinkpad A485
HWLenovoall versionsLenovo Thinkpad E14
HWLenovoall versionsLenovo Thinkpad E14 Gen2
HWLenovoall versionsLenovo Thinkpad E15
HWLenovoall versionsLenovo Thinkpad E15 Gen2
HWLenovoall versionsLenovo Thinkpad E470
HWLenovoall versionsLenovo Thinkpad E470c
HWLenovoall versionsLenovo Thinkpad E475
HWLenovoall versionsLenovo Thinkpad E480
HWLenovoall versionsLenovo Thinkpad E490
HWLenovoall versionsLenovo Thinkpad E495
HWLenovoall versionsLenovo Thinkpad E570
HWLenovoall versionsLenovo Thinkpad E570c
HWLenovoall versionsLenovo Thinkpad E575
HWLenovoall versionsLenovo Thinkpad E580
HWLenovoall versionsLenovo Thinkpad E590
HWLenovoall versionsLenovo Thinkpad E595
HWLenovoall versionsLenovo Thinkpad L13
HWLenovoall versionsLenovo Thinkpad L13 Gen 1
HWLenovoall versionsLenovo Thinkpad L13 Gen 2
HWLenovoall versionsLenovo Thinkpad L13 Yoga
HWLenovoall versionsLenovo Thinkpad L13 Yoga Gen 1
HWLenovoall versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
LPE
Related vulnerabilities
CVE-2023-4030HIGH8.4same product
A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could ...
CVE-2019-18619HIGH7.8same product
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all ver...
CVE-2018-16098HIGH7.8same product
In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics...
CVE-2017-3767HIGH7.8same product
A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1....
CVE-2023-5078MEDIUM6.7same product
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated...