Design/Logic Flaw

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...

Remote code execution

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

Cross site request forgery (csrf)

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery...

Remote code execution

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

CVE-2019-6166

CVE-2019-6166 affects Lenovo Service Bridge prior to version 4.1.0.1. The connected records identify a cross‑site request forgery vulnerability in Lenovo Service Bridge and specify that upgrading to version 4.1.0.1 or later mitigates the issue. The exact exploitation details, affected components/...

CVE-2019-6169

CVE-2019-6169 affects Lenovo Service Bridge prior to version 4.1.0.1. The vulnerability allows unencrypted FTP downloads, exposing confidentiality (partial per CVSS2; high per CVSS3) without authentication over network. Lenovo’s advisories indicate upgrade to 4.1.0.1 or later to remediate. The pu...

CVE-2019-6169

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP...

CVE-2019-6167

Lenovo Service Bridge vulnerability CVE-2019-6167 affects Lenovo Service Bridge prior to 4.1.0.1 and could allow remote code execution. The issue is tied to the Lenovo Service Bridge application (Windows), with exploitation confirmed in sources referencing remote code execution risk when versions...

CVE-2019-6167

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

CVE-2019-6166

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery...

CVE-2019-6168

CVE-2019-6168 affects Lenovo Service Bridge prior to version 4.1.0.1. According to the sources, this vulnerability could allow remote code execution over the network. The underlying issue is present in Lenovo Service Bridge software before the fixed version, and Lenovo’s advisory recommends upgra...

CVE-2019-6168

A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution...

PT-2019-17999 · Lenovo · Lenovo Service Bridge

Name of the Vulnerable Software and Affected Versions: Lenovo Service Bridge versions prior to 4.1.0.1 Description: A vulnerability in Lenovo Service Bridge could allow remote code execution. Recommendations: For versions prior to 4.1.0.1, update to version 4.1.0.1 or later to resolve the issue...

PT-2019-17998 · Lenovo · Lenovo Service Bridge

Name of the Vulnerable Software and Affected Versions: Lenovo Service Bridge versions prior to 4.1.0.1 Description: A vulnerability in Lenovo Service Bridge could allow remote code execution. Recommendations: For versions prior to 4.1.0.1, update to version 4.1.0.1 or later to resolve the issue...

PT-2019-17997 · Lenovo · Lenovo Service Bridge

Name of the Vulnerable Software and Affected Versions: Lenovo Service Bridge versions prior to 4.1.0.1 Description: A reported issue in Lenovo Service Bridge could allow cross-site request forgery. Recommendations: For versions prior to 4.1.0.1, update to version 4.1.0.1 or later to resolve the...

PT-2019-18000 · Lenovo · Lenovo Service Bridge

Name of the Vulnerable Software and Affected Versions: Lenovo Service Bridge versions prior to 4.1.0.1 Description: A vulnerability in Lenovo Service Bridge could allow unencrypted downloads over FTP. Recommendations: For versions prior to 4.1.0.1, update to version 4.1.0.1 or later to resolve th...

Lenovo Service Bridge Cross-Site Request Forgery Vulnerability

Lenovo Service Bridge is a Windows-based application from the Chinese company Lenovo Lenovo. The program is able to automatically detect the serial number, device type and model of the device in order to provide the appropriate services. A cross-site request forgery vulnerability exists in Lenovo...

Lenovo Service Bridge Command Injection Vulnerability

Lenovo Service Bridge is a Windows-based application from the Chinese company Lenovo Lenovo. The program is able to automatically detect the serial number, device type and model of the device in order to provide the appropriate services. A security vulnerability exists in Lenovo Service Bridge. A...

Lenovo Service Bridge Vulnerabilities - Lenovo Support US

No description provided...

New cryptomining botnet malware hits Android devices

By Uzair Amir The new malware exploits Android Debug Bridge ADB ports. In a research conducted by the Tokyo-based cybersecurity and threat defense firm Trend Micro, it was revealed that there is a new cryptomining malware bot that’s particularly targeting Android devices. The miner exploits the...