CVE-2015-7334

Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior

Description: A local privilege escalation issue was reported in Lenovo System Update, where the SUService.exe /type COMMAND type could allow a user to execute arbitrary code with elevated privileges. This issue was fixed and publicly disclosed in 2015.

Recommendations: For versions 5.07.0008 and prior, update to a version released after 2015 to resolve the issue. As a temporary workaround, consider restricting the use of the SUService.exe /type COMMAND type to minimize the risk of exploitation.