Lenovo computer system updates found serious Security Vulnerabilities

Lenovo computer system updates found serious Security Vulnerabilities

Security company IOActive discloses a high-risk vulnerability in Lenovo computer system updates that has been fixed. Security researchers notified Lenovo in February this year that Lenovo released a patch last month, urging users to download updates as soon as possible. The vulnerability is related to Lenovo System Update. It allows local users with the minimum privilege to execute commands with System user privileges because the security token for signature verification of the System Update service is predictable, can be generated by any user. Local and remote attackers can use malicious applications to replace trusted Lenovo applications, the researchers said.

This article permanently updates the link address: