CVE-2024-8058 HIGH

CVE-2024-8058

Vendor Lenovo

Product FileZ Client

Weakness CWE-1287

Published December 16, 2024

Last update August 27, 2025

View on NVD All CVEs

CVSS base score

7.6/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction Required

Confidentiality High

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

An improper parsing vulnerability was reported in the FileZ client that could allow a crafted file in the FileZ directory to read arbitrary files on the device due to URL preloading.

Key dates

02Disclosure timeline

December 16, 2024 CVE published

August 27, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-8058 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/1287.html