2 results (0.002 seconds)

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation. • https://support.lenovo.com/us/en/product_security/LEN-103544 • CWE-276: Incorrect Default Permissions •

CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0

A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service. Una posible vulnerabilidad reportada en ThinkPad USB-C Dock Firmware versión 3.7.2, puede permitir una denegación de servicio. • https://support.lenovo.com/solutions/LEN-27886 •