CVE-2021-3722 MEDIUM

CVE-2021-3722

Vendor Lenovo

Product PCManager

Weakness CWE-276

Published April 22, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

5.0/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow configuration files to be written to non-standard locations during installation.

Key dates

02Disclosure timeline

April 22, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2021-3722 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/276.html