Lenovo Vantage SystemUpdate Plugin

• CVE-2022-3701 High 7.8 A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated priv 0.1%
• CVE-2022-3700 Medium 6.1 A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files. 0.1%