Lenovo Group Ltd. Service Bridge
4 CVEs affecting Lenovo Group Ltd. Service Bridge. Latest disclosed: 2017-06-04. Critical: 0, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-8229 | High | 8.8 | 2017-06-04 | A cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be exploited by an attacker with access to the DHCP server used by t… |
CVE-2016-8228 | High | 7.8 | 2017-06-04 | In Lenovo Service Bridge before version 4, a user with local privileges on a system could execute code with administrative privileges. |
CVE-2016-8231 | High | 7.5 | 2017-06-04 | In Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the code signing certificate could be exploited by an attacker to… |
CVE-2016-8230 | High | 7.5 | 2017-06-04 | In Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send system serial number, machine type and model and product name to… |