[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRlt3h_AqJSdV41thWAhh2J3W3rLiKgjUqkUowvJ2ZRg":3,"g5a-ex:lenovo\u002Fsystem_update@*":131,"g5a-family:lenovo\u002Fsystem_update":133},{"success":4,"data":5},true,{"product":6,"versions":40,"topVulnerabilitiesByEpss":53,"kevVulnerabilities":108,"seoMetadata":109,"meta":128},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":39},"lenovo","system_update",12,15,0,"2023-11-08",[14,17,19,21,23,25,27,29,31,33,35,37],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"5.06.0027",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"5.06.0034",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"5.06.0043",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"5.07.0008",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"5.07.0013",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"5.07.0019",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"5.07.0072",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"5.07.0084",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"5.07.0088",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"5.07.0106",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"5.08.01.0005",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"5.08.02.25","System Update by Lenovo is a technology product with 12 tracked versions and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[41,42,43,44,45,46,47,48,49,50,51,52],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},[54,62,69,75,80,86,91,96,100,104],{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":16,"epssScore":61},"CVE-2015-2219","Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the System Update service (SUService.exe) through an unspecified named pipe.","2015-05-12",7.2,"v2","High",0.04146,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":60,"isKev":16,"epssScore":68},"CVE-2019-6175","A denial of service vulnerability was reported in Lenovo System Update versions prior to 5.07.0088 that could allow configuration files to be written to non-standard locations.","2019-09-26",7.5,"v3.1",0.0168,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":66,"cvssVersion":73,"severity":60,"isKev":16,"epssScore":74},"CVE-2019-6163","A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations.","2019-06-26","v3.0",0.00836,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":66,"cvssVersion":67,"severity":60,"isKev":16,"epssScore":79},"CVE-2015-7336","MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior that could allow the signature check of an update to be bypassed.","2020-03-27",0.00586,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":73,"severity":60,"isKev":16,"epssScore":85},"CVE-2015-6971","Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges by launching signed Lenovo executables.","2017-10-03",7.8,0.00472,{"cveId":87,"description":88,"publishedDate":57,"cvssScore":89,"cvssVersion":59,"severity":60,"isKev":16,"epssScore":90},"CVE-2015-2233","Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 does not properly validate CA chains during signature validation, which allows man-in-the-middle attackers to upload and execute arbitrary files via a crafted certificate.",8.3,0.00404,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":84,"cvssVersion":73,"severity":60,"isKev":16,"epssScore":95},"CVE-2018-9063","MapDrv (C:\\Program Files\\Lenovo\\System Update\\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv.","2018-05-04",0.00378,{"cveId":97,"description":98,"publishedDate":78,"cvssScore":84,"cvssVersion":67,"severity":60,"isKev":16,"epssScore":99},"CVE-2015-7334","MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior where the SUService.exe \u002Ftype COMMAND type could allow a user to execute arbitrary code with elevated privileges.",0.0036,{"cveId":101,"description":102,"publishedDate":78,"cvssScore":84,"cvssVersion":67,"severity":60,"isKev":16,"epssScore":103},"CVE-2015-7333","MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A local privilege escalation vulnerability was reported (fixed and publicly disclosed in 2015) in Lenovo System Update version 5.07.0008 and prior where the SUService.exe \u002Ftype INF and INF_BY_COMPATIBLE_ID command types could allow a user to execute arbitrary code with elevated privileges.",0.00351,{"cveId":105,"description":106,"publishedDate":12,"cvssScore":84,"cvssVersion":67,"severity":60,"isKev":16,"epssScore":107},"CVE-2023-4632","An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges.",0.00323,[],{"title":110,"metaDescription":111,"keywords":112,"structuredData":113},"System Update by Lenovo - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for System Update by Lenovo covering 12 versions with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","System Update vulnerabilities, System Update security, System Update CVE, Lenovo System Update, System Update threat intelligence, Lenovo security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":114,"@type":115,"name":116,"description":111,"url":117,"manufacturer":118,"applicationCategory":122,"softwareVersion":123,"mainEntity":124},"https:\u002F\u002Fschema.org","SoftwareApplication","System Update","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Flenovo\u002Fsystem_update",{"@type":119,"name":120,"url":121},"Organization","Lenovo","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flenovo","Security Software","12 versions tracked",{"@type":125,"name":126,"description":127,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","System Update Security Vulnerabilities","Security vulnerabilities affecting System Update by Lenovo",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":129,"apiVersion":130},"2026-10-19T17:13:08.634Z","3.0",{"rows":132,"total":11,"capped":16,"failed":11},[],[134],{"product":135,"cves":136},"system_update_plugin",3]