Medium severity6.1NVD Advisory· Published Oct 27, 2023· Updated Jun 17, 2026
CVE-2022-3700
CVE-2022-3700
Description
A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files.
Affected products
5- cpe:2.3:a:lenovo:hardware_scan_addin:*:*:*:*:*:lenovo_vantage:*:*Range: <2.4.1.1
- cpe:2.3:a:lenovo:hardware_scan_plugin:*:*:*:*:*:lenovo_vantage:*:*Range: <1.3.1.2
- cpe:2.3:a:lenovo:system_update_plugin:*:*:*:*:*:lenovo_vantage:*:*Range: <2.0.0.213
<=2.0.0.212+ 1 more
- (no CPE)range: <=2.0.0.212
- (no CPE)range:
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/product_security/LEN-94532nvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.