Vulnerability in Lenovo System_update
CVE-2015-2233
Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation, which allows man-in-the-middle attackers to upload and execute arbitrary files via a crafted cert…
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.001 (23.8th percentile) — read the EPSS interpretation.
Affected products
- Lenovo System_update
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- 1032268 (vdb-entry, x_refsource_SECTRACK)
- 74642 (vdb-entry, x_refsource_BID)