Description
An input validation vulnerability was reported in the DeviceSettingsSystemAddin used in Lenovo Vantage and Lenovo Baiying that could allow a local authenticated user to modify arbitrary registry keys with elevated privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo | Vantage | < 1.0.8.15 | 1.0.8.15 |
| Lenovo | Baiying | < 1.0.8.15 | 1.0.8.15 |