System Interface Foundation
CVE-2020-8318
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with elevated privileges.
AnalysisAI
A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with elevated privileges. Affected products include: Lenovo System Interface Foundation.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in System Interface Foundation
View allA potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow
During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interf
A privilege escalation vulnerability was reported in Lenovo System Interface Foundation prior to version 1.1.19.3 that c
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow
A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation
A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today