CVE-2024-6001: An improper certificate validation vulnerability was reported in LADM that could allow a network attacker with the ability to redirect an update...
8.1
CVSS
Description
An improper certificate validation vulnerability was reported in LADM that could allow a network attacker with the ability to redirect an update request to a remote server and execute code with elevated privileges.
Classification
CVE ID: CVE-2024-6001
CVSS Base Severity: HIGH
CVSS Base Score: 8.1
Affected Products
Vendor: Lenovo
Product: Accessories and Display Manager
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.09% (probability of being exploited)
EPSS Percentile: 40.72% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)