CVE-2018-16097

CVE-2018-16097: vulnerability in Lenovo LXCI for VMware

LXCI for VMware and LXCI for Microsoft System Center

Published · Updated

Follow this CVE+ Monitor LXCI for VMware+ Monitor LXCI for Microsoft System Center

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.5%
LXCI for VMware versions prior to 5.5 and LXCI for Microsoft System Center versions prior to 3.5, allow an authenticated user to write to any system file due to insufficient sanitization during the upload of a certificate.
Affected products
Lenovo · LXCI for Microsoft System CenterLenovo · LXCI for VMware
Related CVEs — Lenovo LXCI for VMware

In the same product, most dangerous first.

CVE-2018-9072—LXCI for VMwareEPSS 0.9%CVE-2018-16093—LXCI for VMwareEPSS 0.7%