Researchers
Back
Misha Davidov
Researcher from
Duo Labs
#30725
of 60,403
9.3
Total CVSS
Vulnerabilities
·
1
PT-2016-5769
2016-06-03
9.3
CVE-2016-3944
Lenovo
Lenovo Accelerator Application
The issue allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from the `susapi.lenovomm.com` API endpoint. This is due to a flaw in the UpdateAgent component.