CVE-2015-8535

Summary of CVE-2015-8535: A directory traversal vulnerability in Lenovo Solution Center (LSC) prior to version 3.3.002 allows an attacker to execute arbitrary code with elevated privileges. Affected product: Lenovo Solution Center. Root cause: directory traversal enabling code execution via manip...

CVE-2015-8536

The connected CNVD entry for Lenovo Solution Center CSRF (CVE-2015-8536) confirms a cross-site request forgery vulnerability in Lenovo Solution Center versions before 3.3.002. Attackers could perform unauthorized operations via a malicious site or crafted URL, impacting integrity/availability of ...

CVE-2015-8534

This CVE (CVE-2015-8534) concerns Lenovo Solution Center (LSC). A local privilege escalation was fixed and publicly disclosed in 2015 for LSC versions prior to 3.3.002, enabling an unprivileged user to execute arbitrary code with elevated privileges. The issue is documented across multiple source...