A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.

Project Subscriptions

Vendors Products
Power Management Driver Subscribe
Thinkpad 11e Gen 5 Subscribe
Thinkpad 11e Yoga Gen 6 Subscribe
Thinkpad 13 Gen 2 Subscribe
Thinkpad 25 Subscribe
Thinkpad A275 Subscribe
Thinkpad A285 Subscribe
Thinkpad A475 Subscribe
Thinkpad A485 Subscribe
Thinkpad E14 Subscribe
Thinkpad E14 Gen2 Subscribe
Thinkpad E15 Subscribe
Thinkpad E15 Gen2 Subscribe
Thinkpad E470 Subscribe
Thinkpad E470c Subscribe
Thinkpad E475 Subscribe
Thinkpad E480 Subscribe
Thinkpad E490 Subscribe
Thinkpad E495 Subscribe
Thinkpad E570 Subscribe
Thinkpad E570c Subscribe
Thinkpad E575 Subscribe
Thinkpad E580 Subscribe
Thinkpad E590 Subscribe
Thinkpad E595 Subscribe
Thinkpad L13 Subscribe
Thinkpad L13 Gen 1 Subscribe
Thinkpad L13 Gen 2 Subscribe
Thinkpad L13 Yoga Subscribe
Thinkpad L13 Yoga Gen 1 Subscribe
Thinkpad L13 Yoga Gen 2 Subscribe
Thinkpad L14 Gen 1 Subscribe
Thinkpad L14 Gen 2 Subscribe
Thinkpad L15 Gen 1 Subscribe
Thinkpad L15 Gen 2 Subscribe
Thinkpad L380 Subscribe
Thinkpad L380 Yoga Subscribe
Thinkpad L390 Subscribe
Thinkpad L390 Yoga Subscribe
Thinkpad L470 Subscribe
Thinkpad L480 Subscribe
Thinkpad L490 Subscribe
Thinkpad L570 Subscribe
Thinkpad L580 Subscribe
Thinkpad L590 Subscribe
Thinkpad P1 Subscribe
Thinkpad P14s Gen 1 Subscribe
Thinkpad P14s Gen 2 Subscribe
Thinkpad P15 Gen 1 Subscribe
Thinkpad P15s Gen 1 Subscribe
Thinkpad P15s Gen 2 Subscribe
Thinkpad P15v Gen 1 Subscribe
Thinkpad P17 Gen 1 Subscribe
Thinkpad P1 Gen 2 Subscribe
Thinkpad P1 Gen 3 Subscribe
Thinkpad P43s Subscribe
Thinkpad P51 Subscribe
Thinkpad P51s Subscribe
Thinkpad P52 Subscribe
Thinkpad P52s Subscribe
Thinkpad P53 Subscribe
Thinkpad P53s Subscribe
Thinkpad P71 Subscribe
Thinkpad P72 Subscribe
Thinkpad P73 Subscribe
Thinkpad R14 Subscribe
Thinkpad R14 Gen 2 Subscribe
Thinkpad R480 Subscribe
Thinkpad S1 Gen 4 Subscribe
Thinkpad S2 Gen 2 Subscribe
Thinkpad S2 Gen 5 Subscribe
Thinkpad S2 Gen 6 Subscribe
Thinkpad S2 Yoga Gen 5 Subscribe
Thinkpad S2 Yoga Gen 6 Subscribe
Thinkpad S3 Gen 2 Subscribe
Thinkpad S5 Gen 2 Subscribe
Thinkpad T14 Gen 1 Subscribe
Thinkpad T14 Gen 2 Subscribe
Thinkpad T14s Gen 1 Subscribe
Thinkpad T14s Gen 2i Subscribe
Thinkpad T15 Gen 1 Subscribe
Thinkpad T15 Gen 2 Subscribe
Thinkpad T15g Gen 1 Subscribe
Thinkpad T15p Gen 1 Subscribe
Thinkpad T470 Subscribe
Thinkpad T470p Subscribe
Thinkpad T470s Subscribe
Thinkpad T480 Subscribe
Thinkpad T480s Subscribe
Thinkpad T490 Subscribe
Thinkpad T490s Subscribe
Thinkpad T495 Subscribe
Thinkpad T570 Subscribe
Thinkpad T580 Subscribe
Thinkpad T590 Subscribe
Thinkpad X12 Subscribe
Thinkpad X13 Gen 1 Subscribe
Thinkpad X13 Gen 2i Subscribe
Thinkpad X13 Yoga Gen 1 Subscribe
Thinkpad X13 Yoga Gen 2 Subscribe
Thinkpad X1 Carbon Gen 5 Subscribe
Thinkpad X1 Carbon Gen 6 Subscribe
Thinkpad X1 Carbon Gen 7 Subscribe
Thinkpad X1 Carbon Gen 8 Subscribe
Thinkpad X1 Carbon Gen 9 Subscribe
Thinkpad X1 Extreme Subscribe
Thinkpad X1 Extreme 2nd Subscribe
Thinkpad X1 Extreme Gen 3 Subscribe
Thinkpad X1 Nano Gen 1 Subscribe
Thinkpad X1 Tablet Gen 2 Subscribe
Thinkpad X1 Tablet Gen 3 Subscribe
Thinkpad X1 Titanium Gen 1 Subscribe
Thinkpad X1 Yoga Gen 2 Subscribe
Thinkpad X1 Yoga Gen 3 Subscribe
Thinkpad X1 Yoga Gen 4 Subscribe
Thinkpad X1 Yoga Gen 5 Subscribe
Thinkpad X1 Yoga Gen 6 Subscribe
Thinkpad X270 Subscribe
Thinkpad X280 Subscribe
Thinkpad X380 Yoga Subscribe
Thinkpad X390 Subscribe
Thinkpad X390 Yoga Subscribe
Thinkpad X395 Subscribe
Thinkpad Yoga 11e Gen 5 Subscribe
Thinkpad Yoga 370 Subscribe
Advisories
Source ID Title
EUVD EUVD EUVD-2021-26784 A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.
Fixes

Solution

Update to Lenovo Power Management Driver for Windows 10 version 1.67.17.54 or higher.


Workaround

No workaround given by the vendor.

History

No history.

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-08-03T16:53:17.876Z

Reserved: 2021-03-23T00:00:00

Link: CVE-2021-3462

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-04-13T21:15:25.193

Modified: 2024-11-21T06:21:36.003

Link: CVE-2021-3462

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses