CVE-2020-8327 HIGH

CVE-2020-8327

Vendor Lenovo
Product Vantage
Weakness CWE-428
Published April 14, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A privilege escalation vulnerability was reported in LenovoBatteryGaugePackage for Lenovo System Interface Foundation bundled in Lenovo Vantage prior to version 10.2003.10.0 that could allow an authenticated user to execute code with elevated privileges.

Key dates

02Disclosure timeline

April 14, 2020 CVE published
September 17, 2024 Record updated