CVE-2022-3700

MEDIUM 6.3CVE-2022-3700 · Published 27/10/2023 · updated 17/06/2026

In short

CVE-2022-3700 is a MEDIUM (CVSS 6.3) vulnerability affecting hardware scan addin (lenovo), hardware scan plugin (lenovo), system update plugin (lenovo).
Chance of exploitation in the next 30 days (EPSS): 0.11%, higher than 1.3% of all vulnerabilities.
Fix: update to 2.4.1.1, 1.3.1.2, 2.0.0.213 or later.

Package	Affected versions	Patched versions
hardware scan addin lenovo	`< 2.4.1.1`	`2.4.1.1`
hardware scan plugin lenovo	`< 1.3.1.2`	`1.3.1.2`
system update plugin lenovo	`< 2.0.0.213`	`2.0.0.213`

Description

A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files.

References

support.lenovo.com/us/en/product_security/LEN-94532 · Mitigation

More vulnerabilities in hardware scan addin

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free