MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type INF and INF_BY_COMPATIBLE_ID command types could allow a user to execute arbitrary code with elevated privileges.
oryginał ENCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLenovo System Update
APPLenovo≤ 5.07.0008
Powiązane podatności
An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker wi...
A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.
A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system acc...
A race condition vulnerability was reported in Lenovo System Update prior to version 5.07.0106 that could allo...
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was report...