CVE-2020-8324 MEDIUM

CVE-2020-8324

Vendor Lenovo

Product LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation

Weakness CWE-347

Published April 14, 2020

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

5.0/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.2.184.31 that could allow unsigned DLL files to be executed.

Key dates

02Disclosure timeline

April 14, 2020 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2020-8324 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/347.html

Related vulnerabilities

Identifiers

CVE CVE-2020-8324

CWE CWE-347

CVSS 5.0 / MEDIUM

Affected versions