Skip to content
OpenAdvisories
High · 8.1 CVE-2024-6001 EUVD-2024-47999GHSA-m8m3-3pmc-xj5p

An improper certificate validation vulnerability was reported in LADM that could allow a network attacker with the ability to redirect an u…

Published Dec 16, 2024 · Updated Dec 16, 2024 · Assigned by lenovo

Description

An improper certificate validation vulnerability was reported in LADM that could allow a network attacker with the ability to redirect an update request to a remote server and execute code with elevated privileges.

Affected products

VendorProductAffectedFixed
Lenovo Accessories and Display Manager < 1.0.5.0.5 1.0.5.0.5

References