PT-2020-20086

Name of the Vulnerable Software and Affected Versions Lenovo System Interface Foundation versions prior to 1.1.19.3 Description A privilege escalation issue was reported that could allow an authenticated user to execute code with elevated privileges. Recommendations For versions prior to 1.1.19.3...

PT-2020-20091

Name of the Vulnerable Software and Affected Versions Lenovo System Interface Foundation versions prior to 1.2.184.31 Description A vulnerability was reported that could allow unsigned DLL files to be executed. Recommendations For versions prior to 1.2.184.31, update to version 1.2.184.31 or late...

CVE-2020-8318: Undefined Security Weakness

A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation prior to version that could allow an authenticated user to execute code with elevated privileges...

CVE-2020-8324: Improper Verification of Cryptographic Signature

A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.2.184.31 that could allow unsigned DLL files to be executed...

Lenovo Vantage Vulnerabilities - Lenovo Support US

No description provided...

Remote code execution

A Remote Code ExecutionRCE vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers are able to launch RCE and executes arbitrary command on target system via malicious crafted scripts...

CVE-2019-6189

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL...

CVE-2019-6186

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user...

CVE-2019-6189

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL...

Design/Logic Flaw

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL...

Design/Logic Flaw

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user...

CVE-2019-6189

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL...

CVE-2019-6189

CVE-2019-6189 affects Lenovo System Interface Foundation prior to v1.1.18.3, where an administrative user could load an unsigned DLL due to the unsigned-DLL loading vulnerability. This is documented in Lenovo advisories (LEN-29198) and CVE records. Impact is local with authenticated/admin access ...

CVE-2019-6186

Lenovo System Interface Foundation vulnerability CVE-2019-6186 affects versions prior to 1.1.18.3. An authenticated user could execute code as another user. Lenovo advisory LEN-29198 recommends updating to version 1.1.18.3 or higher as the remediation. Other connected records also mention CVE-201...

CVE-2019-6186

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user...

PT-2019-18013

Name of the Vulnerable Software and Affected Versions Lenovo System Interface Foundation versions prior to 1.1.18.3 Description A potential issue was reported that could allow an authenticated user to execute code as another user. Recommendations For versions prior to 1.1.18.3, update to version...

Lenovo System Interface Foundation Arbitrary Code Execution Vulnerability

The Lenovo System Interface Foundation is a collection of system services, drivers and plug-ins that support Lenovo Vantage applications. An arbitrary code execution vulnerability exists in Lenovo System Interface Foundation versions prior to 1.1.18.3. An attacker can exploit this vulnerability t...

PT-2019-18016

Name of the Vulnerable Software and Affected Versions Lenovo System Interface Foundation versions prior to 1.1.18.3 Description A potential issue was reported that could allow an administrative user to load an unsigned DLL. Recommendations For versions prior to 1.1.18.3, update to version 1.1.18....

CVE-2019-6189: Untrusted Search Path

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an administrative user to load an unsigned DLL...

CVE-2019-6186: Undefined Security Weakness

A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user...