Skip to content
OpenAdvisories
High · 7.8 CVE-2022-4569 EUVD-2022-51903GHSA-mxpr-25c4-rq7w

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with l…

Published Jun 5, 2023 · Updated Jan 8, 2025 · Assigned by lenovo

Vendor: Lenovo Product: ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool

Description

A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with local access to execute code with elevated privileges during the package upgrade or installation.

Affected products

VendorProductAffectedFixed
Lenovo ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool versions prior to v1.0.35_v2 —

References