Lenovo Diagnostics vulnerabilities

CVE-2022-3699 [HIGH] CWE-787 CVE-2022-3699: A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 that could allow a local user to execute code with elevated privileges.

CVE-2020-8338 [HIGH] CWE-426 CVE-2020-8338: A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that coul A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.

CVE-2026-0827 [HIGH] CWE-59 CVE-2026-0827: During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnosti During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.

CVE-2022-3698 [MEDIUM] CWE-400 CVE-2022-3698: A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash.

CVE-2022-0353 [MEDIUM] CWE-400 CVE-2022-0353: A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash.