Lenovo's System Update service: High-severity privilege escalation vulnerabilities

BoerenkoolMetWorst · May 6, 2015

3 CVE's:

CVE-2015-2233, allows local and remote hackers to bypass the device's signature validation checks and replace trusted Lenovo applications with malware.
CVE-2015-2219, is a weakness in Lenovo's security token system, which means least-privileged users could gain high-level access to Lenovo PCs.
CVE-2015-2234, allows local unprivileged users to run commands as an admin user.
Click to expand...

World number one PC maker Lenovo has been accused of running a "massive security risk" because flaws in its online product update service allow hackers to download malware onto its users' systems through a man-in-the-middle (MiTM) attack.
Click to expand...

http://www.scmagazineuk.com/pc-maker-lenovo-exposes-users-to-massive-security-risk/article/412902/

subhrobhandari · May 6, 2015

The researchers explain that with CVE-2015-2233: “The System Update downloads executables from the internet and runs them. As a security measure Lenovo signs its executables and checks the signature before running them, but unfortunately does not completely verify them. As a result, an attacker can create a fake certificate authority which can then be used to sign executables.
Click to expand...

So it looks like Lenovo can be trusted with only systems without an OS.

https://support.lenovo.com/us/en/product_security/lsu_privilege

Lenovo System Update validates all system update files as they are downloaded from the Lenovo servers. However, if the local system contains malware, it is possible that the downloaded updates could be altered before installation creating a race condition.

...Vulnerabilities were discovered on how the security tokens were generated allowing an attacker to run commands.
Click to expand...

Log in or Sign up

Lenovo's System Update service: High-severity privilege escalation vulnerabilities

BoerenkoolMetWorst Registered Member

subhrobhandari Registered Member

Log in or Sign up

Lenovo's System Update service: High-severity privilege escalation vulnerabilities

BoerenkoolMetWorst Registered Member

subhrobhandari Registered Member

Useful Searches