Vulnerability · Published Aug 17, 2021 · Assigned by lenovo
CVE-2021-3633
High 7.3
In plain English
A high-severity security flaw in Driver Management from Lenovo. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.3%top 83.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A DLL preloading vulnerability was reported in Lenovo Driver Management prior to version 2.9.0719.1104 that could allow privilege escalation.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Lenovo | Driver Management | unspecified – before 2.9.0719.1104 |
Weakness: CWE-347 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
References
- https://iknow.lenovo.com.cn/detail/dc_198418.html x_refsource_MISC