{"id":"CVE-2022-3699","aliases":["EUVD-2022-43057","GHSA-hwcv-rwgg-wfrh"],"status":"published","title":"A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to...","description":"A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45\n\n\n\n that could allow a local user to execute code with elevated privileges.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.04249,"percentile":0.91108,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-787"],"published":"2023-10-24T20:48:23Z","modified":"2026-06-17T05:00:08Z","exploits":[{"source":"metasploit","id":"exploit/windows/local/cve_2022_3699_lenovo_diagnostics_driver","title":"Lenovo Diagnostics Driver IOCTL memmove","type":"exploit","platform":"Windows","date":"2022-11-09","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/local/cve_2022_3699_lenovo_diagnostics_driver"},{"source":"pocgithub","id":"Eap2468/CVE-2022-3699","title":"Eap2468/CVE-2022-3699","date":"2024-08-21","url":"https://github.com/Eap2468/CVE-2022-3699"},{"source":"pocgithub","id":"alfarom256/CVE-2022-3699","title":"alfarom256/CVE-2022-3699","date":"2022-11-09","url":"https://github.com/alfarom256/CVE-2022-3699"},{"source":"pocgithub","id":"estimated1337/lenovo_exec","title":"estimated1337/lenovo_exec","date":"2022-12-25","url":"https://github.com/estimated1337/lenovo_exec"}],"products":[{"vendor":"lenovo","product":"diagnostics"},{"vendor":"lenovo","product":"hardwarescan_addin"},{"vendor":"lenovo","product":"hardwarescan_plugin"},{"vendor":"lenovo","product":"hardwarescanplugin"}],"references":[{"url":"https://support.lenovo.com/us/en/product_security/LEN-94532","tags":["x_transferred","Vendor Advisory"]},{"url":"https://support.lenovo.com/us/en/product_security/LEN-102365","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3699"},{"url":"https://github.com/advisories/GHSA-hwcv-rwgg-wfrh"}],"sources":{"cve":[{"id":"CVE-2022-3699","description":"\nA privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45\n\n\n\n that could allow a local user to execute code with elevated privileges.","status":"published","published":"2023-10-24T20:48:23.213Z","modified":"2024-09-17T14:17:40.247Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:34:33.24035Z"}],"euvd":[{"id":"EUVD-2022-43057","description":"\nA privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45\n\n\n\n that could allow a local user to execute code with elevated privileges.","status":"published","published":"2023-10-24T20:48:23Z","modified":"2024-09-17T14:17:40Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:28:21.906955Z"}],"ghsa":[{"id":"GHSA-hwcv-rwgg-wfrh","title":"\nA privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to...","description":"\nA privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45\n\n\n\n that could allow a local user to execute code with elevated privileges.","status":"published","published":"2023-10-25T18:32:20Z","modified":"2024-04-04T08:53:52Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:57:02.541362Z"}],"nvd":[{"id":"CVE-2022-3699","description":"\nA privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45\n\n\n\n that could allow a local user to execute code with elevated privileges.","status":"published","published":"2023-10-25T18:17:15.807Z","modified":"2026-06-17T05:00:08.133Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:07:39.811118Z"}]}}