CVE-2021-3462 : A privilege escalation vulnerability in Lenovo Power Management Driver for Windo

Products affected by CVE-2021-3462

Lenovo » Power Management Driver » For Windows 10
Versions before (<) 1.67.17.54
cpe:2.3:a:lenovo:power_management_driver:*:*:*:*:*:windows_10:*:*
Matching versions
When used together with: Lenovo » Thinkpad 11e Gen 5 » Version: N/A
When used together with: Lenovo » Thinkpad 11e Yoga Gen 6 » Version: N/A
When used together with: Lenovo » Thinkpad 13 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad 25 » Version: N/A
When used together with: Lenovo » Thinkpad A275 » Version: N/A
When used together with: Lenovo » Thinkpad A285 » Version: N/A
When used together with: Lenovo » Thinkpad A475 » Version: N/A
When used together with: Lenovo » Thinkpad A485 » Version: N/A
When used together with: Lenovo » Thinkpad E14 » Version: N/A
When used together with: Lenovo » Thinkpad E14 Gen2 » Version: N/A
When used together with: Lenovo » Thinkpad E15 » Version: N/A
When used together with: Lenovo » Thinkpad E15 Gen2 » Version: N/A
When used together with: Lenovo » Thinkpad E470 » Version: N/A
When used together with: Lenovo » Thinkpad E470c » Version: N/A
When used together with: Lenovo » Thinkpad E475 » Version: N/A
When used together with: Lenovo » Thinkpad E480 » Version: N/A
When used together with: Lenovo » Thinkpad E490 » Version: N/A
When used together with: Lenovo » Thinkpad E495 » Version: N/A
When used together with: Lenovo » Thinkpad E570 » Version: N/A
When used together with: Lenovo » Thinkpad E570c » Version: N/A
When used together with: Lenovo » Thinkpad E575 » Version: N/A
When used together with: Lenovo » Thinkpad E580 » Version: N/A
When used together with: Lenovo » Thinkpad E590 » Version: N/A
When used together with: Lenovo » Thinkpad E595 » Version: N/A
When used together with: Lenovo » Thinkpad L13 » Version: N/A
When used together with: Lenovo » Thinkpad L13 Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad L13 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad L13 Yoga » Version: N/A
When used together with: Lenovo » Thinkpad L13 Yoga Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad L13 Yoga Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad L14 Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad L14 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad L15 Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad L15 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad L380 » Version: N/A
When used together with: Lenovo » Thinkpad L380 Yoga » Version: N/A
When used together with: Lenovo » Thinkpad L390 » Version: N/A
When used together with: Lenovo » Thinkpad L390 Yoga » Version: N/A
When used together with: Lenovo » Thinkpad L470 » Version: N/A
When used together with: Lenovo » Thinkpad L480 » Version: N/A
When used together with: Lenovo » Thinkpad L490 » Version: N/A
When used together with: Lenovo » Thinkpad L570 » Version: N/A
When used together with: Lenovo » Thinkpad L580 » Version: N/A
When used together with: Lenovo » Thinkpad L590 » Version: N/A
When used together with: Lenovo » Thinkpad P1 » Version: N/A
When used together with: Lenovo » Thinkpad P1 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad P1 Gen 3 » Version: N/A
When used together with: Lenovo » Thinkpad P14s Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad P14s Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad P15 Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad P15s Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad P15s Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad P15v Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad P17 Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad P43s » Version: N/A
When used together with: Lenovo » Thinkpad P51 » Version: N/A
When used together with: Lenovo » Thinkpad P51s » Version: N/A
When used together with: Lenovo » Thinkpad P52 » Version: N/A
When used together with: Lenovo » Thinkpad P52s » Version: N/A
When used together with: Lenovo » Thinkpad P53 » Version: N/A
When used together with: Lenovo » Thinkpad P53s » Version: N/A
When used together with: Lenovo » Thinkpad P71 » Version: N/A
When used together with: Lenovo » Thinkpad P72 » Version: N/A
When used together with: Lenovo » Thinkpad P73 » Version: N/A
When used together with: Lenovo » Thinkpad R14 » Version: N/A
When used together with: Lenovo » Thinkpad R14 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad R480 » Version: N/A
When used together with: Lenovo » Thinkpad S1 Gen 4 » Version: N/A
When used together with: Lenovo » Thinkpad S2 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad S2 Gen 5 » Version: N/A
When used together with: Lenovo » Thinkpad S2 Gen 6 » Version: N/A
When used together with: Lenovo » Thinkpad S2 Yoga Gen 5 » Version: N/A
When used together with: Lenovo » Thinkpad S2 Yoga Gen 6 » Version: N/A
When used together with: Lenovo » Thinkpad S3 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad S5 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad T14 Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad T14 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad T14s Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad T14s Gen 2i » Version: N/A
When used together with: Lenovo » Thinkpad T15 Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad T15 Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad T15g Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad T15p Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad T470 » Version: N/A
When used together with: Lenovo » Thinkpad T470p » Version: N/A
When used together with: Lenovo » Thinkpad T470s » Version: N/A
When used together with: Lenovo » Thinkpad T480 » Version: N/A
When used together with: Lenovo » Thinkpad T480s » Version: N/A
When used together with: Lenovo » Thinkpad T490 » Version: N/A
When used together with: Lenovo » Thinkpad T490s » Version: N/A
When used together with: Lenovo » Thinkpad T495 » Version: N/A
When used together with: Lenovo » Thinkpad T570 » Version: N/A
When used together with: Lenovo » Thinkpad T580 » Version: N/A
When used together with: Lenovo » Thinkpad T590 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Carbon Gen 5 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Carbon Gen 6 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Carbon Gen 7 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Carbon Gen 8 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Carbon Gen 9 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Extreme » Version: N/A
When used together with: Lenovo » Thinkpad X1 Extreme 2nd » Version: N/A
When used together with: Lenovo » Thinkpad X1 Extreme Gen 3 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Nano Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Tablet Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Tablet Gen 3 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Titanium Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Yoga Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Yoga Gen 3 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Yoga Gen 4 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Yoga Gen 5 » Version: N/A
When used together with: Lenovo » Thinkpad X1 Yoga Gen 6 » Version: N/A
When used together with: Lenovo » Thinkpad X12 » Version: N/A
When used together with: Lenovo » Thinkpad X13 Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad X13 Gen 2i » Version: N/A
When used together with: Lenovo » Thinkpad X13 Yoga Gen 1 » Version: N/A
When used together with: Lenovo » Thinkpad X13 Yoga Gen 2 » Version: N/A
When used together with: Lenovo » Thinkpad X270 » Version: N/A
When used together with: Lenovo » Thinkpad X280 » Version: N/A
When used together with: Lenovo » Thinkpad X380 Yoga » Version: N/A
When used together with: Lenovo » Thinkpad X390 » Version: N/A
When used together with: Lenovo » Thinkpad X390 Yoga » Version: N/A
When used together with: Lenovo » Thinkpad X395 » Version: N/A
When used together with: Lenovo » Thinkpad Yoga 11e Gen 5 » Version: N/A
When used together with: Lenovo » Thinkpad Yoga 370 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-3462

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 10 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-3462

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	Lenovo Group Ltd.
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2021-3462

CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

Assigned by: psirt@lenovo.com (Secondary)

References for CVE-2021-3462

https://support.lenovo.com/us/en/product_security/LEN-59174

Lenovo Power Management Driver Vulnerabilities - Lenovo Support NL
Vendor Advisory

CVEs referencing this url

Vulnerability Details : CVE-2021-3462

Products affected by CVE-2021-3462

Exploit prediction scoring system (EPSS) score for CVE-2021-3462

CVSS scores for CVE-2021-3462

CWE ids for CVE-2021-3462

References for CVE-2021-3462