CVE-2022-3743

MEDIUM Year: 2022
CVSS v3 Score
4.4
Medium
Weakness Type
CWE-200
View all →

Vulnerability Description

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enumerate Embedded Controller (EC) commands.

Related Vulnerabilities

CVE-2015-7418

MEDIUM
CVSS:4.4(Medium)

IBM WebSphere eXtreme Scale and the WebSphere DataPower XC10 Appliance allow some sensitive data to linger in memory instead of being overwritten which could allow a local user with administrator priv...

CWE-2002015

CVE-2015-7462

MEDIUM
CVSS:4.4(Medium)

IBM WebSphere MQ 8.0.0.4 on IBM i platforms allows local users to discover cleartext certificate-keystore passwords within MQ trace output by leveraging administrator privileges to execute the mqcertc...

CWE-2002015

CVE-2016-1242

MEDIUM
CVSS:4.4(Medium)

file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files...

CWE-2002016

CVE-2016-7091

MEDIUM
CVSS:4.4(Medium)

sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosu...

CWE-2002016

CVE-2016-7397

MEDIUM
CVSS:4.4(Medium)

The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the SMTP user settings in th...

CWE-2002016

CVE-2016-7442

MEDIUM
CVSS:4.4(Medium)

The Frontend component in Sophos UTM with firmware 9.405-5 and earlier allows local administrators to obtain sensitive password information by reading the "value" field of the proxy user settings in "...

CWE-2002016