CVE-2015-7336

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed...

CVE-2015-7335

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow a user to execute arbitrary code with elevated privileges...

Privilege escalation

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type COMMAND type could allow a user to...

Privilege escalation

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type INF and INFBYCOMPATIBLEID command type...

Design/Logic Flaw

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed...

CVE-2015-7333

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type INF and INFBYCOMPATIBLEID command type...

CVE-2015-7334

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type COMMAND type could allow a user to...

CVE-2015-7335

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow a user to execute arbitrary code with elevated privileges...

CVE-2015-7336

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed...

CVE-2015-7334

Lenovo System Update (SUService.exe) local privilege escalation CVE-2015-7334 affects Lenovo System Update prior to and including version 5.07.0008, where the SUService.exe /type COMMAND path could allow an unprivileged user to execute arbitrary code with elevated privileges. The vulnerability ar...

CVE-2015-7336

CVE-2015-7336 affects Lenovo System Update (ThinkVantage System Update). The vulnerability lies in SUService.exe, which creates a named pipe for system update services; an attacker could bypass the pipeline client identity signature and send arbitrary commands to the pipe when using Lenovo System...

CVE-2015-7335

The CVE-2015-7335 entry concerns a race condition in Lenovo System Update (ThinkVantage System Update) that could allow local privilege escalation on affected systems. Technical details across connected records indicate impact on Lenovo System Update versions up to 5.07.0008 and earlier, enabling...

CVE-2015-7333

CVE-2015-7333 is a local privilege escalation in Lenovo System Update (ThinkVantage System Update) prior to or including version 5.07.0008. The SUService.exe process handles system updates and accepts commands (type INF and INF_BY_COMPATIBLE_ID) that could be exploited to execute arbitrary code w...

CVE-2015-7334: Improper Privilege Management

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type COMMAND type could allow a user to...

CVE-2015-7335: Concurrent Execution using Shared Resource with Improper Synchronization

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A race condition was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow a user to execute arbitrary code with elevated privileges...

CVE-2015-7336: Improper Verification of Cryptographic Signature

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed...

CVE-2015-7333: Improper Privilege Management

MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported fixed and publicly disclosed in 2015 in Lenovo System Update version 5.07.0008 and prior where the SUService.exe /type INF and INFBYCOMPATIBLEID command type...

PT-2020-7881

Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior Description: A vulnerability was reported in Lenovo System Update that could allow the signature check of an update to be bypassed. This issue was fixed and publicly disclosed in 2015...

PT-2020-7879

Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior Description: A local privilege escalation issue was reported in Lenovo System Update, where the SUService.exe /type COMMAND type could allow a user to execute arbitrary code with elevated...

PT-2020-7880

Name of the Vulnerable Software and Affected Versions: Lenovo System Update versions 5.07.0008 and prior Description: A race condition was reported in Lenovo System Update that could allow a user to execute arbitrary code with elevated privileges. The issue was fixed and publicly disclosed in 201...