CVE-2015-2219 in Lenovo System Update
Summary
Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the System Update service (SUService.exe) through an unspecified named pipe.
Reservation
03/05/2015
Disclosure
05/12/2015
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 75209 | Lenovo System Update Security Token SUService.exe access control | 264 | High | Official fix | CVE-2015-2219 |