Lenovo Active Protection System Privilege Escalation - us

Lenovo Security Advisory: LEN-13637 Potential Impact: Privilege Escalation or Denial of Service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3740 Summary Description: During an internal assessment, a local privilege escalation vulnerability was identified in Lenovo...

Intel AMT features to remotely provide the right high-risk vulnerability analysis-vulnerability warning-the black bar safety net

Earlier this week, Intel released a high-risk mention the right vulnerability, the impact of the range including the past 7 years Intel Server chip remote management capabilities. A remote attacker can exploit the vulnerability control there PC's, laptops and servers. This vulnerability number...

Lenovo System Update Local Elevation of Privilege Vulnerability

Lenovo System Update formerly known as ThinkVantage System Update is a suite of automatic system update tools from the Chinese company Lenovo, which includes device driver updates, Windows system patch updates, and more. A local elevation of privilege vulnerability exists in Lenovo System Update...

Lenovo System Update Local Elevation of Privilege Vulnerability (CNVD-2017-06633)

Lenovo System Update formerly known as ThinkVantage System Update is a suite of automatic system update tools from the Chinese company Lenovo, which includes device driver updates, Windows system patch updates, and more. A privilege extraction vulnerability exists in Lenovo System Update versions...

Design/Logic Flaw

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by making a prediction of tvsutmpxxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."...

Privilege escalation

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by navigating to 1 "Click here to learn more" or 2 "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local...

CVE-2015-8110

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by navigating to 1 "Click here to learn more" or 2 "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local...

CVE-2015-8109

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by making a prediction of tvsutmpxxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."...

CVE-2015-8109

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by making a prediction of tvsutmpxxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."...

CVE-2015-8110

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by navigating to 1 "Click here to learn more" or 2 "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local...

CVE-2015-8109

CVE-2015-8109 affects Lenovo System Update (formerly ThinkVantage System Update) prior to version 5.07.0019. The issue is a local privilege-escalation vulnerability where an attacker could gain administrator/SYSTEM privileges by predicting credentials for the temporary administrator account tvsu_...

CVE-2015-8110

Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 contains a local privilege escalation in the Tvsukernel.exe GUI. In the context of a temporary administrator account, users can exploit navigation paths like “Click here to learn more” or “View privacy policy” to gain Adm...

CVE-2015-8109: Undefined Security Weakness

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by making a prediction of tvsutmpxxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."...

CVE-2015-8110: Undefined Security Weakness

Lenovo System Update formerly ThinkVantage System Update before 5.07.0019 allows local users to gain privileges by navigating to 1 "Click here to learn more" or 2 "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local...

PT-2017-7320

Name of the Vulnerable Software and Affected Versions Lenovo System Update formerly ThinkVantage System Update versions prior to 5.07.0019 Description The issue allows local users to gain privileges by predicting the credentials of a temporary administrator account, which requires knowledge of th...

PT-2017-7321

Name of the Vulnerable Software and Affected Versions Lenovo System Update versions prior to 5.07.0019 Description A local privilege escalation issue exists, allowing local users to gain privileges. This can be achieved by navigating to specific links, such as "Click here to learn more" or "View...

SMSVova Spyware Hiding in 'System Update' App Ejected From Google Play Store

An Android app that falsely claimed to be a tool for keeping smartphones up-to-date with the latest version of the OS was found surreptitiously tracking the physical location of it users using spyware called SMSVova. SMSVova hides inside a bogus app called System Update and is sent commands by...

Intel Direct Connect Interface Can Be Enabled - us

Lenovo Security Advisory: LEN-13640 Potential Impact: Denial of service or accessing of data on a system by an attacker with physical access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5684 Summary Description: In 2015, starting with the Skylake processor family, Inte...

Lenovo System Update - Privilege Escalation Exploit

Exploit for windows platform in category local exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Lenovo System Update Privilege Escalation', 'Description' = %q The named pipe,...

Visual Studio crashing desktop after last OS update

When you install Visual Studio 2010 or 2012, Visual Studio also installs the .NET 4 components it needs in the Application layer. If you update the .NET 4 components in the Visual Studio layer and do not also update them in the Operating System layer, there is a mismatch in the .NET files, which...