PT-2015-5676
CVE-2015-2233
·
تاريخ النشر
2015-05-12
·
تاريخ التحديث
2016-12-03
الوصف من
CVSS 2.0
8.3
عاليةالمقاييسAV:A/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Lenovo System Update versions prior to 5.06.0034
Description
The issue arises from improper validation of CA chains during signature validation, allowing man-in-the-middle attackers to upload and execute arbitrary files using a crafted certificate.
Recommendations
For versions prior to 5.06.0034, update to version 5.06.0034 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾