CVE-2024-4696

{"id": "CVE-2024-4696", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "psirt@lenovo.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}]}, "published": "2024-06-13T20:15:15.697", "references": [{"url": "https://support.lenovo.com/us/en/product_security/LEN-163429", "source": "psirt@lenovo.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@lenovo.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commands to be executed if a specially crafted link is visited."}, {"lang": "es", "value": "Se inform\u00f3 una vulnerabilidad de escalada de privilegios en Lenovo Service Bridge antes de la versi\u00f3n 5.0.2.17 que podr\u00eda permitir la ejecuci\u00f3n de comandos del sistema operativo si se visita un enlace especialmente manipulado."}], "lastModified": "2024-06-17T12:43:31.090", "sourceIdentifier": "psirt@lenovo.com"}