CVE-2015-2219
Lenovo System Update < 5.06.0027 - Privilege Escalation via Predictable Security Token
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-2219.
PoCs published by Metasploit, Michael Milvich, Sofiane Talmat, h0ng10, including Metasploit module exploits/windows/local/lenovo_systemupdate.
AI-analyzed exploit summary This Metasploit module exploits a privilege escalation vulnerability in Lenovo System Update by interacting with the named pipe \SUPipeServer to execute arbitrary commands as SYSTEM using a security token generated by tvsutil.dll.
Description
Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to gain privileges by sending a valid token with a command to the System Update service (SUService.exe) through an unspecified named pipe.
Exploits (2)
This Metasploit module exploits a privilege escalation vulnerability in Lenovo System Update by interacting with the named pipe \SUPipeServer to execute arbitrary commands as SYSTEM using a security token generated by tvsutil.dll.
This Metasploit module exploits a privilege escalation vulnerability in Lenovo System Update by interacting with the named pipe \SUPipeServer to execute arbitrary commands as SYSTEM using a security token generated by tvsutil.dll.