Command injection

The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument...

CVE-2016-5248

The CVE-2016-5248 issue affects Lenovo Solution Center versions older than 3.3.003. The StopProxy command in LSC.Services.SystemService allows local users to terminate arbitrary processes via the PID argument, indicating a local privilege/availability impact. Lenovo advisory LEN-7814 confirms the...

CVE-2016-5249: Undefined Security Weakness

Lenovo Solution Center LSC before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly...

PT-2016-6325

Name of the Vulnerable Software and Affected Versions Lenovo Solution Center versions prior to 3.3.003 Description The issue allows local users to terminate arbitrary processes. This is achieved through the StopProxy command in LSC.Services.SystemService, where a user can specify the PID argument...

PT-2016-6326

Name of the Vulnerable Software and Affected Versions Lenovo Solution Center versions prior to 3.3.003 Description The issue allows local users to execute arbitrary code with LocalSystem privileges. This can be achieved via vectors involving the LSC.Services.SystemService StartProxy command, wher...