Privilege escalation vulnerabilities in Lenovo Solution Center

Beschreibung

Multiple serious vulnerabilities have been found in Lenovo Solution Center. Malicious users can exploit these vulnerabilities to gain privileges.

Below is a complete list of vulnerabilities

1. An unknown vulnerability at SystemService can be exploited locally to terminate arbitrary process via StopProxy command;
2. An unknown vulnerability at SystemService can be exploited locally via StartProxy command to conduct execute arbitrary code with LocalSystem privileges.

Ursprüngliche Informationshinweise

• Lenovo advisory

CVE Liste

• CVE-2016-5248
  high
• CVE-2016-5249
  high

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com