CVE-2015-8110

ALTO 7.8CVE-2015-8110 · Published 24/04/2017 · updated 17/06/2026

En resumen

CVE-2015-8110 es una vulnerabilidad ALTO (CVSS 7.8) que afecta a lenovo system update (lenovo).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.50%, mayor que el 43.0% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
lenovo system update lenovo	`≤ 5.07.0013`	No fix yet

Description

Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by navigating to (1) "Click here to learn more" or (2) "View privacy policy" within the Tvsukernel.exe GUI application in the context of a temporary administrator account, aka a "local privilege escalation vulnerability."

References

securityfocus.com/bid/98037 · Third Party Advisory
ioactive.com/pdfs/IOActive_Advisory_Lenovo_TVSUkernel-Escalation-Privileges.pdf · Exploit
support.lenovo.com/us/en/product_security/lsu_privilege · Vendor Advisory

Más vulnerabilidades de lenovo system update

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free