CVE-2016-3944

UpdateAgent in Lenovo Accelerator Application allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from susapi.lenovomm.com...

Design/Logic Flaw

UpdateAgent in Lenovo Accelerator Application allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from susapi.lenovomm.com...

CVE-2016-3944: Improper Input Validation

UpdateAgent in Lenovo Accelerator Application allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from susapi.lenovomm.com...

PT-2016-5769

Name of the Vulnerable Software and Affected Versions Lenovo Accelerator Application affected versions not specified Description The issue allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from the susapi.lenovomm.com API endpoint. This is due to a flaw i...

KLA10821 Arbitrary code execution vulnerability in Lenovo Accelerator Application

Improper implementation of update mechanism was found in Lenovo Accelerator Application. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via spoofing an update response by man-in-the-middle attack. Technical details To...