Lenovo Service Bridge Vulnerabilities - US

Lenovo Security Advisory: LEN-27725

Potential Impact: Remote code execution

Severity: High

Scope of Impact: Lenovo-specific

CVE Identifier: CVE-2019-6166,CVE-2019-6167,CVE-2019-6168, CVE-2019-6169

Summary Description:

Vulnerabilities reported in Lenovo Service Bridge could allow remote code execution or unencrypted downloads over FTP.

Mitigation Strategy for Customers (what you should do to protect yourself):

Upgrade to the Lenovo Service Bridge version 4.1.0.1 (or later).

If you previously installed Lenovo Service Bridge, the update will be performed automatically. To confirm the version installed, go to Apps & Settings.