High severity7.8NVD Advisory· Published Oct 27, 2023· Updated Jun 17, 2026
CVE-2022-3701
CVE-2022-3701
Description
A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.
Affected products
5- cpe:2.3:a:lenovo:hardware_scan_addin:*:*:*:*:*:lenovo_vantage:*:*Range: <2.4.1.1
- cpe:2.3:a:lenovo:hardware_scan_plugin:*:*:*:*:*:lenovo_vantage:*:*Range: <1.3.1.2
- cpe:2.3:a:lenovo:system_update_plugin:*:*:*:*:*:lenovo_vantage:*:*Range: <2.0.0.213
<=2.0.0.212+ 1 more
- (no CPE)range: <=2.0.0.212
- (no CPE)range:
Patches
Vulnerability mechanics
References
1- support.lenovo.com/us/en/product_security/LEN-94532nvdMitigationVendor Advisory
News mentions
0No linked articles in our index yet.