Описание
Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.3.002 (включая)
cpe:2.3:a:lenovo:solution_center:*:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00171
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-264
Связанные уязвимости
CVSS3: 7.8
github
больше 3 лет назад
Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly.
EPSS
Процентиль: 39%
0.00171
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
CWE-264