{"id":"CVE-2020-8327","state":"PUBLISHED","title":"A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that c","description":"A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to execute code with elevated privileges.","publishedAt":"2020-04-14T21:05:21.274Z","updatedAt":"2024-09-17T00:11:17.525Z","severity":{"score":7.3,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","source":"lenovo"},"assigner":"lenovo","products":["Lenovo Vantage"],"affected":[{"vendor":"Lenovo","product":"Vantage","versions":[{"version":"unspecified","status":"affected","lessThan":"10.2003.10.0","versionType":"custom"}]}],"references":["https://support.lenovo.com/us/en/product_security/LEN-30401"],"weaknesses":["CWE-428"],"ingestedAt":"2026-10-29T19:47:44.297Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/8xxx/CVE-2020-8327.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2020-8327","state":"PUBLISHED","datePublished":"2020-04-14T21:05:21.274Z","dateUpdated":"2024-09-17T00:11:17.525Z","assignerShortName":"lenovo","assignerOrgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b","dateReserved":"2020-01-28T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to execute code with elevated privileges."}],"affected":[{"vendor":"Lenovo","product":"Vantage","versions":[{"version":"unspecified","status":"affected","lessThan":"10.2003.10.0","versionType":"custom"}]}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-30401","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-428","description":"CWE-428 Unquoted Search Path or Element","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"lenovo","dateUpdated":"2020-04-14T21:05:21.000Z","orgId":"da227ddf-6e25-4b41-b023-0f976dcaca4b"},"credits":[{"lang":"en","value":"Lenovo thanks Jonas Lykkegård for reporting this issue."}],"datePublic":"2020-04-14T00:00:00.000Z","solutions":[{"lang":"en","value":"To update Vantage and its Lenovo System Interface Foundation component, follow these steps: 1) Update Lenovo Vantage to version 10.2003.10.0 from the Microsoft Store. 2) Re-launch Lenovo Vantage to complete the update."}],"source":{"advisory":"LEN-30401","discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.0.9"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@lenovo.com","DATE_PUBLIC":"2020-04-14T21:00:00.000Z","ID":"CVE-2020-8327","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Vantage","version":{"version_data":[{"version_affected":"<","version_value":"10.2003.10.0"}]}}]},"vendor_name":"Lenovo"}]}},"credit":[{"lang":"eng","value":"Lenovo thanks Jonas Lykkegård for reporting this issue."}],"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to execute code with elevated privileges."}]},"generator":{"engine":"Vulnogram 0.0.9"},"impact":{"cvss":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-428 Unquoted Search Path or Element"}]}]},"references":{"reference_data":[{"name":"https://support.lenovo.com/us/en/product_security/LEN-30401","refsource":"MISC","url":"https://support.lenovo.com/us/en/product_security/LEN-30401"}]},"solution":[{"lang":"en","value":"To update Vantage and its Lenovo System Interface Foundation component, follow these steps: 1) Update Lenovo Vantage to version 10.2003.10.0 from the Microsoft Store. 2) Re-launch Lenovo Vantage to complete the update."}],"source":{"advisory":"LEN-30401","discovery":"UNKNOWN"}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-30401","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T09:56:28.313Z"}}]}}}