← voltar
CVE-2015-2233

CVE-2015-2233

EPSS 0.4%
Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation, which allows man-in-the-middle attackers to upload and execute arbitrary files via a crafted certificate.
Produtos afetados
n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
http://securitytracker.com/id/1032268http://support.lenovo.com/us/en/product_security/lsu_privilegehttp://www.ioactive.com/pdfs/Lenovo_System_Update_Multiple_Privilege_Escalations.pdfhttp://www.securityfocus.com/bid/74642