Lenovo System Update Plugin — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo System Update Plugin, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-3701 — CVSS 7.8 (high): A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a…
• CVE-2022-3700 — CVSS 6.1 (medium): A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier…
• CVE-2022-3702 — CVSS 6.1 (medium): A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local…