CVE-2015-7336: High severity lenovo system update vulnerability
Published Mar 27, 2020
·Updated
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed.
Affected Software
1 affected component
Lenovo System Update<=5.07.0008
Event History
Mar 27, 2020
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
Description
Frequently Asked Questions
1
What is CVE-2015-7336?
CVE-2015-7336 is a vulnerability in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed.
2
What is the severity of CVE-2015-7336?
The severity of CVE-2015-7336 is high with a CVSS score of 7.5.
3
How to fix CVE-2015-7336?
To fix CVE-2015-7336, update Lenovo System Update to a version higher than 5.07.0008.
4
Where can I find more information about CVE-2015-7336?
You can find more information about CVE-2015-7336 on the Lenovo product security page.
5
What is the CWE of CVE-2015-7336?
The CWE of CVE-2015-7336 is CWE-347.