الباحثون
رجوع
Misha Davidov
باحث من
Duo Labs
#30922
من 60,401
9.3
إجمالي CVSS
الثغرات
·
1
PT-2016-5769
2016-06-03
9.3
CVE-2016-3944
Lenovo
Lenovo Accelerator Application
The issue allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from the `susapi.lenovomm.com` API endpoint. This is due to a flaw in the UpdateAgent component.