Lenovo System Interface Foundation vulnerabilities

9 CVEs affecting Lenovo System Interface Foundation, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-3969, published 2022-05-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-3969, published 2022-05-18. High severity, CVSS 7.0. EPSS: 1.9% chance of exploitation in the next 30 days. A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker…
CVE-2021-3922, published 2022-05-18. High severity, CVSS 7.0. EPSS: 1.9% chance of exploitation in the next 30 days. A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and…
CVE-2019-6186, published 2019-11-20. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user.
CVE-2020-8318, published 2020-04-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with…
CVE-2020-8319, published 2020-04-14. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. A privilege escalation vulnerability was reported in Lenovo System Interface Foundation prior to version 1.1.19.3 that could allow an authenticated user to execute code with elevated privileges.
CVE-2020-8324, published 2020-04-14. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.2.184.31 that could allow unsigned DLL files to be executed.
CVE-2019-6189, published 2019-11-20. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL.
CVE-2016-8223, published 2016-11-29. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with…
CVE-2020-8346, published 2020-09-15. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation prior to version 1.1.19.5 that could allow configuration files to be written…