Lenovo Solution Center vulnerabilities

7 CVEs affecting Lenovo Solution Center, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-8536, published 2020-03-27.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-6177, published 2019-08-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege…
• CVE-2015-8535, published 2020-03-27. High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days. MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory traversal vulnerability was discovered (fixed and publicly disclosed in 2015) in Lenovo Solution Center…
• CVE-2016-5249, published 2016-06-30. High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days. Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a…
• CVE-2015-8536, published 2020-03-27. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was discovered (fixed and publicly disclosed in 2015) in Lenovo Solution Center (LSC) prior to…
• CVE-2015-8534, published 2020-03-27. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was discovered (fixed and publicly disclosed in 2015) in Lenovo Solution…
• CVE-2016-1876, published 2017-05-23. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. The backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified vectors.
• CVE-2016-5248, published 2016-06-30. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument.