VULNERABILITY INTELLIGENCE
CVE-2022-34888
CVSS score2.7 LOW
EPSS probability0.41%
CISA KEVNot currently listed
Published2023-01-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Description
The Remote Mount feature can potentially be abused by valid, authenticated users to make connections to internal services that may not normally be accessible to users. Internal service access controls, as applicable, remain in effect.
Weakness classification
- psirt@lenovo.com: CWE-184
- nvd@nist.gov: CWE-697
Primary references
- psirt@lenovo.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory