Advanced Settings Utility

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-3743 HIGH PATCH This Week

If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility (ASU), UpdateXpress System Pack Installer. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

Lenovo Information Disclosure Advanced Settings Utility Toolscenter Dynamic System Analysis Updatexpress System Pack Installer

NVD

CVSS 3.0

7.5

EPSS

0.4%

CVE-2012-3329 LOW Monitor

IBM Advanced Settings Utility (ASU) through 3.62 and 3.70 through 9.21 and Bootable Media Creator (BoMC) through 2.30 and 3.00 through 9.21 on Linux allow local users to overwrite arbitrary files via. Rated low severity (CVSS 3.3). No vendor patch available.

Information Disclosure IBM Advanced Settings Utility Bootable Media Creator

NVD

CVSS 2.0

3.3

EPSS

0.1%

CVE-2017-3743

EPSS 0% CVSS 7.5

HIGH PATCH This Week

Lenovo Information Disclosure Advanced Settings Utility +2

NVD

CVE-2012-3329

EPSS 0% CVSS 3.3

LOW Monitor

Information Disclosure IBM Advanced Settings Utility +1

NVD