CVE-2021-3463
Assigner: lenovo
Published: 2021-04-13T20:41:44
State: PUBLISHED
affected: product: Power Management Driver for Windows 10
vendor: Lenovo
versions: lessThan: 1.67.17.54
status: affected
version: unspecified
versionType: custom
credits: value: Lenovo thanks Aobo Wang of Chaitin Security Research Lab for reporting these issues.
descriptions: value: A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 4.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-476
description: CWE-476 NULL Pointer Dereference
type: CWE
solutions: value: Update to Lenovo Power Management Driver for Windows 10 version 1.67.17.54 or higher.
source: advisory: LEN-59174
discovery: UNKNOWN
x_generator: engine: Vulnogram 0.0.9