PT-2020-7878
CVE-2015-7333
·
تاريخ النشر
2020-03-27
·
تاريخ التحديث
2020-03-30
الوصف من
CVSS 2.0
7.2
عاليةالمقاييسAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Lenovo System Update versions 5.07.0008 and prior
Description:
A local privilege escalation issue was reported in Lenovo System Update, where the SUService.exe /type INF and INF BY COMPATIBLE ID command types could allow a user to execute arbitrary code with elevated privileges. This issue was fixed and publicly disclosed in 2015.
Recommendations:
For versions 5.07.0008 and prior, update to a version released after 2015 to resolve the issue. As a temporary workaround, consider restricting the use of the SUService.exe /type INF and INF BY COMPATIBLE ID command types until a patch is applied.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾