Pesquisadores
Voltar
Misha Davidov
Pesquisador de
Duo Labs
#30824
de 60,403
9.3
CVSS total
Vulnerabilidades
·
1
PT-2016-5769
2016-06-03
9.3
CVE-2016-3944
Lenovo
Lenovo Accelerator Application
The issue allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from the `susapi.lenovomm.com` API endpoint. This is due to a flaw in the UpdateAgent component.