[VULN] Security Alert for diagnostics

[my-local-testing-github-app]

Alert IDs:

• 071bff68-f07b-4e97-be14-375e731515a0
• 3a4a3d6c-ead2-4719-aa65-8624497dff35
• 3d21c749-67eb-479f-b7f1-9552c5f0cb6d
• c93cc5a2-0799-4bf7-8536-52cd0561843b

Vulnerabilities in diagnostics

Release: March19

Total Vulnerabilities: 4

---

1. CVE-2020-8338

Severity: HIGH (Score: 7.8)

Description:
A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-8338

Alert ID: 071bff68-f07b-4e97-be14-375e731515a0

---

2. CVE-2022-3699

Severity: HIGH (Score: 7.8)

Description:

A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45

that could allow a local user to execute code with elevated privileges.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-3699

Alert ID: 3a4a3d6c-ead2-4719-aa65-8624497dff35

---

3. CVE-2022-0353

Severity: MEDIUM (Score: 4.4)

Description:

A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to

1.3.1.2

and 

Lenovo Diagnostics versions prior to 4.45

that could allow a local user with administrative access to trigger a system crash.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-0353

Alert ID: 3d21c749-67eb-479f-b7f1-9552c5f0cb6d

---

4. CVE-2022-3698

Severity: MEDIUM (Score: 4.4)

Description:

A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to

1.3.1.2

and 

Lenovo Diagnostics versions prior to 4.45

that could allow a local user with administrative access to trigger a system crash.

Reference: https://nvd.nist.gov/vuln/detail/CVE-2022-3698

Alert ID: c93cc5a2-0799-4bf7-8536-52cd0561843b

---