CVE-2008-3249

MEDIUM 5.1CVE-2008-3249 · Published 21/07/2008 · updated 16/06/2026

In short

CVE-2008-3249 is a MEDIUM (CVSS 5.1) vulnerability affecting thinkvantage system update (lenovo).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
thinkvantage system update lenovo	`= 3.13≤ 3.13.0005`	No fix yet

Description

The client in Lenovo System Update before 3.14 does not properly validate the certificate when establishing an SSL connection, which allows remote attackers to install arbitrary packages via an SSL certificate whose X.509 headers match a public certificate used by IBM.

References

secunia.com/advisories/30379 · Patch
securitytracker.com/id
security-objectives.com/advisories/SECOBJADV-2008-01.txt
securityfocus.com/archive/1/492579
securityfocus.com/bid/29366
exchange.xforce.ibmcloud.com/vulnerabilities/42638

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free