CVE-2015-7336

Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior

Description: A vulnerability was reported in Lenovo System Update that could allow the signature check of an update to be bypassed. This issue was fixed and publicly disclosed in 2015.

Recommendations: For versions 5.07.0008 and prior, update to a version released after 2015 to resolve the issue. As a temporary workaround, consider restricting the use of the Lenovo System Update feature until a patch is applied.