
CVE-2022-3698
https://notcve.org/view.php?id=CVE-2022-3698
24 Oct 2023 — A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash. Se informó una vulnerabilidad de Denegación de Servicio (DoS) en las versiones Lenovo HardwareScanPlugin anteriores a 1.3.1.2 y Lenovo Diagnostics anteriores a 4.45 que podría permitir que un usuario local con acceso administrativo desencadene un bloqueo del sistema. • https://support.lenovo.com/us/en/product_security/LEN-102365 • CWE-400: Uncontrolled Resource Consumption •

CVE-2022-0353
https://notcve.org/view.php?id=CVE-2022-0353
24 Oct 2023 — A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash. Se informó una vulnerabilidad de Denegación de Servicio (DoS) en las versiones Lenovo HardwareScanPlugin anteriores a 1.3.1.2 y Lenovo Diagnostics anteriores a 4.45 que podría permitir que un usuario local con acceso administrativo desencadene un bloqueo del sistema. • https://support.lenovo.com/us/en/product_security/LEN-102365 • CWE-400: Uncontrolled Resource Consumption •

CVE-2022-3699 – Lenovo Diagnostics Driver Memory Access
https://notcve.org/view.php?id=CVE-2022-3699
03 Feb 2023 — A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 that could allow a local user to execute code with elevated privileges. Se informó una vulnerabilidad de escalada de privilegios en Lenovo HardwareScanPlugin antes de la versión 1.3.1.2 y Lenovo Diagnostics antes de la versión 4.45 que podría permitir a un usuario local ejecutar código con privilegios elevados. A privilege escalation vulnerability was repor... • https://packetstorm.news/files/id/170849 • CWE-787: Out-of-bounds Write •

CVE-2020-8338
https://notcve.org/view.php?id=CVE-2020-8338
14 Oct 2020 — A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system. Se reportó una vulnerabilidad en la ruta de búsqueda de DLL en Lenovo Diagnostics versiones anteriores a 4.35.4, que podría permitir a un usuario con acceso local ejecutar código en el sistema • https://support.lenovo.com/us/en/product_security/LEN-32702 • CWE-426: Untrusted Search Path •

CVE-2006-1035
https://notcve.org/view.php?id=CVE-2006-1035
07 Mar 2006 — Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors. • http://secunia.com/advisories/19076 •

CVE-2006-1036
https://notcve.org/view.php?id=CVE-2006-1036
07 Mar 2006 — Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions." • http://secunia.com/advisories/19076 •

CVE-2006-1037
https://notcve.org/view.php?id=CVE-2006-1037
07 Mar 2006 — SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors. • http://secunia.com/advisories/19076 •