High severity · published Oct 14, 2020
CVE-2020-8345
A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation…
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
A DLL search path vulnerability was reported in the Lenovo HardwareScan Plugin for the Lenovo Vantage hardware scan feature prior to version 1.0.46.11 that could allow escalation of privilege.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 36% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HS
Hardware Scan · Lenovo
before 1.0.46.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-8345
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-8345
Vendor Advisory
https://support.lenovo.com/us/en/product_security/LEN-44421
More from Hardware Scan
7.1
CVE-2026-0827
During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation…