Lenovo Imcontroller vulnerabilities

2 vulnerabilities

Known vulnerabilities in Lenovo Imcontroller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2021-3969lenovoimcontroller+1
EPSS score
1.93%
A Time of Check Time of Use (TOCTOU) vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges.7.8CVE-2021-3922lenovoimcontroller+1
EPSS score
1.93%
A race condition vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3 that could allow a local attacker to connect and interact with the IMController child process' named pipe.