ورود / ثبت‌نام

جزئیات آسیب‌پذیری

CVE-2025-0886

Lenovo Elliptic Human Presence Detection Device Driver for T14 Gen 4Lenovo Elliptic Human Presence Detection Device Driver for T14 Gen 5Lenovo Elliptic Human Presence Detection Device Driver for T14s Gen 5Lenovo Elliptic Human Presence Detection Device Driver for T16 Gen 2Lenovo Elliptic Human Presence Detection Device Driver for T16 Gen 3Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 4
CVSS 4.0
8.5بالا

شرح رسمی (انگلیسی)

An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, authenticated user to escalate privileges.

امتیازهای CVSS

امتیازنسخهمنبعبردار
8.5بالا 4.0 CVEProject cvelistV5 (CNA) (lenovo) CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
7.8بالا 3.1 CVEProject cvelistV5 (CNA) (lenovo) CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Lenovo Elliptic Human Presence Detection Device Driver for T14 Gen 4 (Type 21K3, 21K4) v < 1000.100.108.1893 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21ML, 21MM) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for T14s Gen 5 (Type 21LS, 21LT) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for T16 Gen 2 (Type 21K7 21K8) v < 1000.100.106.2391 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for T16 Gen 3 (Type 21MN, 21MQ) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 4 (Type 21K5, 21K6) v < 1000.100.108.1893 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 5 (Type 21ME, 21MF) v < 1000.100.108.6136 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P16s Gen 2 (Type 21K9, 21KA) v < 1000.100.106.2391 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 1 (Type 21FC, 21FD) v < 1000.100.108.900 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P16v Gen 2 (Type 21KX, 21KY) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad T14s Gen 4 (Type 21F8, 21F9) v < 1000.100.108.1893 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for X13 2-in-1 Gen 5 (Type 21LW, 21LX) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Device Driver for X13 Gen 5 (Type 21LU, 21LV) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Driver for ThinkPad P1 Gen 7 (Type 21KV, 21KW) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Driver for ThinkPad P14s Gen 5 (Type 21G2, 21G3) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Driver for ThinkPad P16v Gen 1 (Type 21FE, 21FF) v < 1000.100.108.2235 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection Driver for ThinkPad X13 Gen 4 (Type 21J3, 21J4) v < 1000.100.108.2234 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence Detection driver for ThinkPad T14s Gen 6 (Type 21M1, 21M2) v < 1000.100.109.82 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Human Presence detection Device Driver for ThinkPad P16 Gen 2 (Type 21FA, 21FB) v < 1000.100.108.774 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service For ThinkPad P1 Gen 6 (Type 21FV, 21FW) v < 1000.100.108.548 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service for P14s Gen 4 (Type 21HF, 21HG) v < 1000.100.108.858 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service for P16s Gen 2 (Type 21HK, 21HL) v < 1000.100.108.858 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service for T14 Gen 4 (Type 21HD, 21HE) v < 1000.100.108.858 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service for T14s Gen 4 (Type 21F6, 21F7) v < 1000.100.108.858 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service for T16 Gen 2 (Type 21HH, 21HJ) v < 1000.100.108.858 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21AH, 21AJ) v < 3.2.61209.5 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service for ThinkPad T14 Gen 3 (Type 21CF, 21CG)) v < 3.2.61209.5 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service for ThinkPad X1 Carbon 12th Gen (Type 21KC, 21KD) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor Service for X1 2-in-1 Gen 9 (Type 21KE, 21KF) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor for ThinkPad X13 Gen 4 (Type 21EX, 21EY) v < 1000.100.108.761 CVEProject cvelistV5 (CNA)
Lenovo Elliptic Virtual Lock Sensor for X13 Yoga Gen 4 (Type 21F2, 21F3) v < 1000.100.108.761 CVEProject cvelistV5 (CNA)
Lenovo lliptic Human Presence Detection Device Driver for T14 Gen 5 (Type 21MC, 21MD) v < 1000.100.108.6136 CVEProject cvelistV5 (CNA)
Lenovo lliptic Human Presence Detection Driver for P16s Gen 3 (Type 21KS, 21KT) v < 1000.100.108.801 CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۴/۰۴/۲۶
آخرین به‌روزرسانی
۱۴۰۴/۰۴/۲۶
وضعیت
منتشرشده
صادرکننده (CNA)
lenovo

پیش‌بینی بهره‌برداری (EPSS)

۰٫۱۹٪
احتمال بهره‌برداری در ۳۰ روز
۹٫۶٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
خیر
وضعیت بهره‌برداری
ندارد
اثر فنی
کامل

ضعف‌ها (CWE)

  • CWE-276
    Incorrect Default Permissions