Description (CNA)
Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-018/?fid=7172
- https://support.lenovo.com/us/en/product_security/lsu_privilege
ADP enrichment
No English description supplied.