CVE-2022-3698

low-risk

Published 2023-10-25

A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash.

Do I need to act?

0.04% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.4/10 Medium

LOCAL / LOW complexity

Affected Products (2)

Diagnostics

Hardwarescan Plugin

Affected Vendors

Lenovo

References (4)

Vendor Advisory https://support.lenovo.com/us/en/product_security/LEN-102365

Vendor Advisory https://support.lenovo.com/us/en/product_security/LEN-94532

Vendor Advisory https://support.lenovo.com/us/en/product_security/LEN-102365

Vendor Advisory https://support.lenovo.com/us/en/product_security/LEN-94532

/ 100

low-risk

Severity 15/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 7/34 · Low