PT-2017-7321
CVE-2015-8110
·
Published
2017-04-24
·
Updated
2017-04-28
Description by
CVSS 2.0
7.2
HighMetricsAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Lenovo System Update versions prior to 5.07.0019
Description
A local privilege escalation issue exists, allowing local users to gain privileges. This can be achieved by navigating to specific links, such as "Click here to learn more" or "View privacy policy", within the Tvsukernel.exe GUI application when using a temporary administrator account.
Recommendations
For versions prior to 5.07.0019, update to version 5.07.0019 or later to resolve the issue. As a temporary workaround, consider restricting access to the Tvsukernel.exe GUI application to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾