exploitDog

CVE-2016-8237

Опубликовано: 10 апр. 2017

Источник: nvd

CVSS3: 8.1

CVSS2: 9.3

EPSS Низкий

Описание

Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle attackers to execute arbitrary code.

Ссылки

http://www.securityfocus.com/bid/97560
Third Party Advisory
VDB Entry
https://support.lenovo.com/us/en/solutions/LEN-8313
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/97560
Third Party Advisory
VDB Entry
https://support.lenovo.com/us/en/solutions/LEN-8313
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:lenovo:updates:-:*:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01545

Низкий

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-wr24-m42c-7rjv

CVSS3: 8.1

github

больше 3 лет назад

Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle attackers to execute arbitrary code.

EPSS

Процентиль: 81%

0.01545

Низкий

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-264