CVE-2019-6175

CVE-2019-6175 affects Lenovo System Update prior to 5.07.0088. The issue allows writing configuration files to non‑standard locations, leading to a Denial of Service. Affected component: Lenovo System Update (Lenovo PS500271 advisories confirm the vulnerability and recommend upgrading to version ...

CVE-2022-4568

CVE-2022-4568 is described in the initial document as a directory permissions management vulnerability in Lenovo System Update that may allow elevation of privileges. The connected documents corroborate Lenovo-specific context and reference a Lenovo security advisory (LEN-103545) for remediation ...

CVE-2022-0354

Summary: CVE-2022-0354 targets Lenovo System Update. Affected: Lenovo System Update versions before 2022-02-25. Description from PT-2022-2221 indicates an issue during installation of a System Update package that displays a command prompt window, allowing a local user with interactive system acce...

CVE-2019-6163

The CVE-2019-6163 issue affects Lenovo System Update prior to version 5.07.0084. The vulnerability, a denial of service caused by the ability to write service log files to non-standard locations, is documented across NVD and Lenovo advisories. Remediation is to upgrade Lenovo System Update to ver...

CVE-2023-4632

CVE-2023-4632 concerns Lenovo System Update. The vulnerability is an uncontrolled/search path vulnerability in Lenovo System Update that could let a local attacker execute code with elevated privileges due to an untrusted search path. Affected product is Lenovo System Update; root cause is the un...

CVE-2018-9063

CVE-2018-9063 affects Lenovo System Update’s MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe). Versions prior to 5.07.0072 contain a local buffer overflow by entering very large user ID or password, leading to undefined behavior and potential arbitrary code execution. The exploit is loca...

CVE-2020-8342

CVE-2020-8342 impacts Lenovo System Update prior to version 5.07.0106, describing a race condition that could allow privilege escalation. Lenovo’s Lenovo PS500347 advisory and CNVD/NVD entries align on the same vulnerability and provide a remediation: upgrade to 5.07.0106 or newer. Other connecte...