HIGH🇵🇱 Wersja polska

CVE-2023-3112

CVSS 7.8v3.1pub. 2023-10-25upd. 2024-11-21

A vulnerability was reported in Elliptic Labs Virtual Lock Sensor for ThinkPad T14 Gen 3 that could allow an attacker with local access to execute code with elevated privileges.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Ellipticlabs Ai Virtual Presence Sensor

    APP
    Ellipticlabs
    < 3.1.50719.1

  • Ellipticlabs Virtual Lock Sensor

    APP
    Ellipticlabs
    < 3.1.50719.1

  • Lenovo Thinkpad T14 Gen 3

    HW
    Lenovo
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-5078MEDIUM6.7same product

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated...

CVE-2022-4574MEDIUM6.7same product

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker wit...

CVE-2022-48189MEDIUM6.7same product

An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with ...

CVE-2017-5638CRITICAL9.8⚠ KEVPL ✓same vendor

RCE w Apache Struts 2 poprzez błędną obsługę nagłówków HTTP (Jakarta Multipart parser)

CVE-2021-3849CRITICAL9.8PL ✓same vendor

Auth Bypass w firmware Lenovo FPC2 i SMM — zdalne wykonanie poleceń