Executive Summary

This vulnerability is an insufficient access control issue in Lenovo Dispatcher 3.0 and 3.1 drivers used on some Lenovo consumer notebooks. It allows an authenticated local user to execute code with elevated privileges, potentially gaining higher access than intended. The vulnerability does not affect Lenovo Dispatcher 3.2 or systems with Windows Core Isolation Memory Integrity enabled.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an authenticated local user to run code with elevated privileges, which might lead to unauthorized actions such as installing software, changing system settings, or accessing sensitive data beyond their normal permissions.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that the Windows feature Core Isolation Memory Integrity is enabled on your system, as this feature prevents the vulnerability from affecting the system. Additionally, avoid using the vulnerable Lenovo Dispatcher 3.0 and 3.1 drivers and upgrade to Lenovo Dispatcher 3.2 or later, which is not affected.

Useful 0 Not Useful 0