high7.8
CVE-2015-6971
Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) …
Impact
Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | System Update | through 5.06.0034 |
Weakness classification
References
- NVD record
- CVE.org record
- https://support.lenovo.com/us/en/product_security/lsu_privilege
- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-018/?fid=7172
- https://support.lenovo.com/us/en/product_security/lsu_privilege
- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-018/?fid=7172