Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Landesk Subscribe
Filtered by product Lenovo Thinkmanagement Console
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-1195 1 Landesk 1 Lenovo Thinkmanagement Console 2017-08-28 7.5 HIGH N/A
Unrestricted file upload vulnerability in andesk/managementsuite/core/core.anonymous/ServerSetup.asmx in the ServerSetup web service in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension via a PutUpdateFileCore command in a RunAMTCommand SOAP request, then accessing the file via a direct request to the file in the web root.
CVE-2012-1196 1 Landesk 1 Lenovo Thinkmanagement Console 2017-08-28 5.0 MEDIUM N/A
Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 allows remote attackers to delete arbitrary files via a .. (dot dot) in the filename parameter in a SetTaskLogByFile SOAP request.