An improper permission vulnerability was reported in Lenovo PC Manager that could allow a local attacker to escalate privileges. This vulnerability poses a significant risk as it can lead to unauthorized access and control over the affected system. Users are advised to take immediate action to mitigate the risks associated with this vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.5 | CVE-2025-8098 |
Exploitation
To exploit this vulnerability, a local attacker would need to have access to the affected system. By leveraging the improper permissions in Lenovo PC Manager, the attacker could escalate their privileges, potentially allowing them to execute arbitrary code or access sensitive information.
Affected Products
- Lenovo PC Manager: A software tool that helps users manage their Lenovo devices, which is vulnerable due to improper permission settings.
Mitigation
Users are advised to update Lenovo PC Manager to the latest version as soon as it becomes available. Additionally, restricting local access to the affected systems can help mitigate the risk of exploitation until a patch is applied.