CVE-2019-6177

A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to Lenovo Vantage or Lenovo Diagnostics in April 2018.

Score

CVSS 3.1 9.8 Critical

Status

Modified - psirt@lenovo.com

Published

2019-08-21

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Solution Center (Lenovo)

References

• https://support.lenovo.com/solutions/LEN-27811