CVE-2022-0354

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window...

CVE-2022-0354

Summary: CVE-2022-0354 targets Lenovo System Update. Affected: Lenovo System Update versions before 2022-02-25. Description from PT-2022-2221 indicates an issue during installation of a System Update package that displays a command prompt window, allowing a local user with interactive system acce...

CVE-2022-0354

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window...

CVE-2022-0354: Cleartext Storage of Sensitive Information in GUI

A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during the installation of a System Update package released before 2022-02-25 that displays a command prompt window...

Lenovo System Update Interactive Code Execution

The vulnerability of the Lenovo System Update software relates to the ability to interact with the system during the update installation process, where a command-line window is displayed. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

Lenovo System Update Privilege Escalation Vulnerability - Lenovo Support US

No description provided...

PT-2022-2221 · Lenovo · Lenovo System Update

Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions prior to 2022-02-25 Description: The issue is related to the possibility of interactive system access during the installation of a System Update package, which displays a command prompt window. This could allow a...

PT-2022-15549 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.4 iPadOS versions prior to 15.4 Description: The issue allows an app to learn information about the current camera view before being granted camera access, due to a problem with app access to camera metadata. This has...

CVE-2021-40055

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity...

CVE-2021-40055

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity...

CVE-2021-40055

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity...

Important: kernel-livepatch-4.14.256-197.484

Issue Overview: A data leak flaw was found in the way XFSIOCALLOCSP IOCTL in the XFS filesystem allowed for size increase of files with unaligned size. A local attacker could use this flaw to leak data on the XFS filesystem otherwise not accessible to them. CVE-2021-4155 Affected Packages:...

CVE-2021-40055

CVE-2021-40055 describes a man-in-the-middle attack vulnerability during system update download in recovery mode that can compromise integrity. Connected records corroborate this as a MITM issue affecting Huawei EMUI and Magic UI (Android-based). The NVD details indicate impact to integrity (I) a...

CVE-2021-40055: Undefined Security Weakness

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity...

PT-2022-11176

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a man-in-the-middle attack vulnerability that occurs during system update downloads in recovery mode. Successful exploitation of...

Apply those updates now: CVE bypass offers up admin privileges for Windows 10

If you’re running Windows 10, it’s time to stop delaying those patches and bring your systems up to date as soon as possible. Bleeping Computer reports that a researcher has come up with a bypass for an older bug, which could serve up some major headaches if left to fester. Those headaches will...

Unspecified Vulnerability in Dell Emc System Update

Dell Emc System Update is an application from Dell USA Inc. It is used to distribute Dell updates for Linux, Microsoft Windows operating systems, and updates through Idrac and operating systems to Idrac Direct. Dell Emc System Update has a security vulnerability that can be exploited by an attack...

CVE-2022-22554

Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials vulnerability. A local attacker with user privleges could potentially exploit this vulnerability leading to the disclosure of user passwords...

Design/Logic Flaw

Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials vulnerability. A local attacker with user privleges could potentially exploit this vulnerability leading to the disclosure of user passwords...

CVE-2022-22554

Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials vulnerability. A local attacker with user privleges could potentially exploit this vulnerability leading to the disclosure of user passwords...