CVE-2020-8345

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
Lenovo	Vantage HardwareScan Plugin	>= unspecified, < 1.0.46.11

References

https://support.lenovo.com/us/en/product_security/LEN-44421Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-44421Vendor Advisory

Timeline

Published: Oct 14, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-83465.5A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.CVE-2020-83476.1A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 t CVE-2020-83486.1A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 th CVE-2020-83499.8An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System (CNOS CVE-2020-83508.8An authentication bypass vulnerability was reported in Lenovo ThinkPad Stack Wireless Router firmware version 1.1.3.4 that could allow escal CVE-2020-83517.8A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to CVE-2020-83522.4In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.CVE-2020-83536.7Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature CVE-2020-83546.7A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitr CVE-2020-83554.9An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials prov CVE-2020-83564.9An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified, for the Syslog and SMT CVE-2020-83575.5A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to b