CVE-2024-2175

Summary

An insecure permissions vulnerability was reported in Lenovo Display Control Center (LDCC) and Lenovo Accessories and Display Manager (LADM)

that could allow a local attacker to escalate privileges.

Affected Software

VendorProductVersion RangeStatus
LenovoDisplay Control Center0 < 3.0.29082.0affected
LenovoAccessories and Display Manager0 < 1.0.3.05affected

Weaknesses

  • CWE-276: CWE-276 Incorrect Default Permissions

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References