CVE-2015-8109: High severity lenovo system update vulnerability
Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to gain privileges by making a prediction of tvsutmpxxxxxXXXXX account credentials that requires knowledge of the time that this account was created, aka a "temporary administrator account vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-8109?
CVE-2015-8109 is classified as a high-severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2015-8109?
To fix CVE-2015-8109, update Lenovo System Update to version 5.07.0019 or later.
Who is affected by CVE-2015-8109?
CVE-2015-8109 affects users of Lenovo System Update versions prior to 5.07.0019.
What type of vulnerability is CVE-2015-8109?
CVE-2015-8109 is a local privilege escalation vulnerability affecting the temporary administrator account.
Can CVE-2015-8109 be exploited remotely?
No, CVE-2015-8109 can only be exploited by local users with access to the system.