CVE-2024-4763 - Vulnerability Details - OpenCVE

An insecure driver vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM)

that could allow a local attacker to escalate privileges to kernel.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00029.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Lenovo	Accessories And Display Manager Display Control Center

No data.

No data.

No data.

References

Link	Providers
https://support.lenovo.com/us/en/product_security/LEN-155486

History

Fri, 16 Aug 2024 15:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Lenovo Lenovo accessories And Display Manager Lenovo display Control Center
CPEs		cpe:2.3:a:lenovo:accessories_and_display_manager:::::::: cpe:2.3:o:lenovo:display_control_center::::::::
Vendors & Products		Lenovo Lenovo accessories And Display Manager Lenovo display Control Center
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 16 Aug 2024 14:30:00 +0000

Type	Values Removed	Values Added
Description		An insecure driver vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM) that could allow a local attacker to escalate privileges to kernel.
Weaknesses		CWE-276
References		https://support.lenovo.com/us/en/product_security/LEN-155486
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: lenovo

Published: 2024-08-16T14:17:13.323Z

Updated: 2024-08-16T15:08:37.647Z

Reserved: 2024-05-10T16:48:15.261Z

Link: CVE-2024-4763

Vulnrichment

Updated: 2024-08-16T15:08:25.234Z

NVD

Status : Awaiting Analysis

Published: 2024-08-16T15:15:30.563

Modified: 2024-08-19T13:00:23.117

Link: CVE-2024-4763

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-4763", "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "state": "PUBLISHED", "assignerShortName": "lenovo", "dateReserved": "2024-05-10T16:48:15.261Z", "datePublished": "2024-08-16T14:17:13.323Z", "dateUpdated": "2024-08-16T15:08:37.647Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Display Control Center", "vendor": "Lenovo", "versions": [{"lessThan": "3.0.29082.0", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "product": "Accessories and Display Manager", "vendor": "Lenovo", "versions": [{"lessThan": "1.0.3.05", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Lenovo thanks Alain R\u00f6del of Neodyme AG for reporting CVE-2024-4763."}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">An insecure driver vulnerability was reported in <span style=\"background-color: rgb(255, 255, 255);\">Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM)</span>\n\n that could allow a local attacker to escalate privileges to kernel.</span>"}], "value": "An insecure driver vulnerability was reported in\u00a0Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM)\n\n that could allow a local attacker to escalate privileges to kernel."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo", "dateUpdated": "2024-08-16T14:17:13.323Z"}, "references": [{"url": "https://support.lenovo.com/us/en/product_security/LEN-155486"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Update Lenovo Display Control Center to version 3.0.29082.0 </span><span style=\"background-color: rgb(255, 255, 255);\">or later.</span>\n\n<br>"}], "value": "Update Lenovo Display Control Center to version 3.0.29082.0 or later."}, {"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Update Lenovo Accessories and Display Manager to version 1.0.3.05 or later."}], "value": "Update Lenovo Accessories and Display Manager to version 1.0.3.05 or later."}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"affected": [{"vendor": "lenovo", "product": "display_control_center", "cpes": ["cpe:2.3:o:lenovo:display_control_center:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "3.0.29082.0", "versionType": "custom"}]}, {"vendor": "lenovo", "product": "accessories_and_display_manager", "cpes": ["cpe:2.3:a:lenovo:accessories_and_display_manager:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1.0.3.05", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-16T15:02:13.979566Z", "id": "CVE-2024-4763", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-16T15:08:37.647Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-4763", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-08-16T15:02:13.979566Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:lenovo:display_control_center:*:*:*:*:*:*:*:*"], "vendor": "lenovo", "product": "display_control_center", "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.29082.0", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:lenovo:accessories_and_display_manager:*:*:*:*:*:*:*:*"], "vendor": "lenovo", "product": "accessories_and_display_manager", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.3.05", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-16T15:08:25.234Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Lenovo thanks Alain R\u00f6del of Neodyme AG for reporting CVE-2024-4763."}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Lenovo", "product": "Display Control Center", "versions": [{"status": "affected", "version": "0", "lessThan": "3.0.29082.0", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Lenovo", "product": "Accessories and Display Manager", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.3.05", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Update Lenovo Display Control Center to version 3.0.29082.0 or later.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Update Lenovo Display Control Center to version 3.0.29082.0 </span><span style=\"background-color: rgb(255, 255, 255);\">or later.</span>\n\n<br>", "base64": false}]}, {"lang": "en", "value": "Update Lenovo Accessories and Display Manager to version 1.0.3.05 or later.", "supportingMedia": [{"type": "text/html", "value": "Update Lenovo Accessories and Display Manager to version 1.0.3.05 or later.", "base64": false}]}], "references": [{"url": "https://support.lenovo.com/us/en/product_security/LEN-155486"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "An insecure driver vulnerability was reported in\u00a0Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM)\n\n that could allow a local attacker to escalate privileges to kernel.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">An insecure driver vulnerability was reported in <span style=\"background-color: rgb(255, 255, 255);\">Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM)</span>\n\n that could allow a local attacker to escalate privileges to kernel.</span>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions"}]}], "providerMetadata": {"orgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "shortName": "lenovo", "dateUpdated": "2024-08-16T14:17:13.323Z"}}}, "cveMetadata": {"cveId": "CVE-2024-4763", "state": "PUBLISHED", "dateUpdated": "2024-08-16T15:08:37.647Z", "dateReserved": "2024-05-10T16:48:15.261Z", "assignerOrgId": "da227ddf-6e25-4b41-b023-0f976dcaca4b", "datePublished": "2024-08-16T14:17:13.323Z", "assignerShortName": "lenovo"}, "dataVersion": "5.1"}