CVE-2016-8223

{"id": "CVE-2016-8223", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2016-11-29T20:59:01.360", "references": [{"url": "http://www.securityfocus.com/bid/94597", "source": "psirt@lenovo.com"}, {"url": "https://support.lenovo.com/us/en/solutions/LEN_10150", "tags": ["Patch", "Vendor Advisory"], "source": "psirt@lenovo.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interface Foundation software installed on some Windows 10 PCs where a user with local privileges could run arbitrary code with administrator level privileges."}, {"lang": "es", "value": "Durante una revisi\u00f3n de seguridad interna, Lenovo identific\u00f3 una vulnerabilidad de escalamiento de privilegios local en el software Lenovo System Interface Foundation instalado en algunos PCs con Windows 10 donde un usuario con privilegios locales pod\u00eda ejecutar c\u00f3digo arbitrario con privilegios de nivel administrador."}], "lastModified": "2016-12-06T18:44:21.503", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:lenovo:system_interface_foundation:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0BBBE0F-4937-4555-8E92-0F1E338D1F64", "versionEndIncluding": "1.0.66.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*", "vulnerable": false, "matchCriteriaId": "084984D5-D241-497B-B118-50C6C1EAD468"}, {"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*", "vulnerable": false, "matchCriteriaId": "BA592626-F17C-4F46-823B-0947D102BBD2"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@lenovo.com"}