CVE-2020-8338 is a vulnerability in Lenovo Diagnostics
Published on October 14, 2020
A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.
Vulnerability Analysis
CVE-2020-8338 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Weakness Type
What is an Untrusted Path Vulnerability?
The application searches for critical resources using an externally-supplied search path that can point to resources that are not under the application's direct control.
CVE-2020-8338 has been classified to as an Untrusted Path vulnerability or weakness.
Products Associated with CVE-2020-8338
Want to know whenever a new CVE is published for Lenovo Diagnostics? stack.watch will email you.
Affected Versions
Lenovo Diagnostics:- Version unspecified and below 4.35.4 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.