CVE-2015-6971

published 2017-10-03

CVE-2015-6971: Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe)…

high 7.8 CVSS 3.0

AV L AC L PR L UI N S U C H I H A H

Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
lenovo	system_update	<= 5.06.0034	—

CWE-77