MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed.
References
Link | Resource |
---|---|
https://support.lenovo.com/us/en/product_security/lsu_privilege | Vendor Advisory |
Configurations
Information
Published : 2020-03-27 08:15
Updated : 2020-04-01 11:51
NVD link : CVE-2015-7336
Mitre link : CVE-2015-7336
JSON object : View
CWE
CWE-347
Improper Verification of Cryptographic Signature
Products Affected
lenovo
- system_update