![](\"http:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2015\/01\/Schutz.jpg\")
Lenovo has released a new version 3.3.003 of Lenovo Solution Center, because prior versions comes with two critical vulnerabilities. Here are a few hints how to handle the new security desaster.<\/p>\nLenovo has released a new version 3.3.003 of Lenovo Solution Center, because prior versions comes with two critical vulnerabilities. Here are a few hints how to handle the new security desaster.<\/p>\n
<\/p>\n
The new software allows users to quickly identify the status for system health, network connections and overall system security. Here are the features provided by LSC:<\/p>\n The vendor writes: Lenovo Solution Center (LSC) ist pre-installed on Lenovo computers with Windows 8 and Windows 7, but the software is downloadable also for Windows 10 systems (64-bit and 32-bit).<\/p>\n Unfortunately LSC is known as a permanent security risk on Lenovo computers (see my article Lenovo Solution Center vulnerable again<\/a> from May 2016).<\/p>\n Lenovo has published a Security Advisories addressing two vulnerabilities CVE-2016-5248<\/a> and CVE-2016-5249. Both high-severity vulnerabilities allows privilege escalation from unprivileged user accounts so LocalSystem.<\/p>\n Local privilege escalation vulnerabilities were identified in Lenovo Solution Center where unprivileged local users could terminate processes running at higher privilege levels (CVE-2016-5248) or execute arbitrary code (CVE-2016-5249) with LocalSystem account privileges.<\/p><\/blockquote>\n According to pcworld<\/a>, the flaws could allow attackers to execute malicious code with system privileges and to kill other processes. This can be used to compromise a Windows system.<\/p>\n Affected are all Lenovo Solution Center installs up to version 3.3.002, Lenovo advises users<\/a> to upgrade to LSC version 3.3.003. This can be done:<\/p>\n My recommendation is to unistall Lenovo Solution Center via control panel \u2013 uninstall programs. Side note: A reader of my German article has informed me that LSC also requires parts of Adobe AIR (also a security night mare). So, after uninstalling LSC you should also dump Adobe AIR.<\/p>\n Similar article: Lenovo has released a new version 3.3.003 of Lenovo Solution Center, because prior versions comes with two critical vulnerabilities. Here are a few hints how to handle the new security desaster.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[101,69,224],"class_list":["post-902","post","type-post","status-publish","format-standard","hentry","category-windows","tag-lenovo","tag-security","tag-solution-center"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/902","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=902"}],"version-history":[{"count":2,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/902\/revisions"}],"predecessor-version":[{"id":35305,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/902\/revisions\/35305"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=902"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=902"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=902"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}According to Lenovo (see<\/a>), the Lenovo Solution Center (LSC) is a new software application created by Lenovo for Think products that helps users get the most out of their PC experience.<\/p>\n
(Source: Lenovo)<\/p>\n
\n
Version 3.3.003 fixes two vulnerabilities<\/h3>\n
\n
\n<\/strong>Lenovo Solution Center vulnerable again<\/a>
\nOptional Windows update KB3107998 removes Lenovo USB Blocker tool<\/a>
\nLenovo ships Superfish adware preinstalled on systems<\/a>
\nDell's Superfish 2: Devices shipped with cloneable Root certificate<\/a>
\nKomodia SSL certificates and hijacking tech are widely spread<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"