CVE Feed

    Dashboard / CVE / CVE-2015-8534

    CVE-2015-8534

    MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was discovered (fixed and publicly disclosed in 2015) in Lenovo Solution Center (LSC) prior to version 3.3.002 that could allow a user to execute arbitrary code with elevated privileges.

    Published:Mar 27, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 27, 2020
    EPSS Score:0.00038
    CVSS Score:7.8

    Affected Products

    Vendor
    Lenovo
    Product
    Solution Center

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-269 Improper Privilege Management

    Related CVEs

    CVE-2015-8536 (CVSS 8.8) — MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was discov…
    CVE-2015-8535 (CVSS 7.8) — MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A directory traversal vuln…
    CVE-2019-6177 (CVSS 9.8) — A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allo…
    CVE-2016-1876 (CVSS 7.8) — The backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local users to gain SYS…
    CVE-2016-5249 (CVSS 7.8) — Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem priv…
    CVE-2016-5248 (CVSS 5.5) — The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local user…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High