CVE-2015-2219 Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the...
HighCVSS 7.2
EPSS 4.1%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the System Update service (SUService.exe) through an unspecified named pipe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Lenovo system update | <= 5.06.0027 | No fix listed |
References
- 1032268 vdb-entry
- support.lenovo.com vendor-advisory
- www.ioactive.com
- 74649 vdb-entry