System Interface Foundation
CVE-2019-6186
HIGH
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user.
AnalysisAI
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.
Technical ContextAI
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow an authenticated user to execute code as another user. Affected products include: Lenovo System Interface Foundation.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in System Interface Foundation
View allDuring an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System Interf
A privilege escalation vulnerability was reported in Lenovo System Interface Foundation prior to version 1.1.19.3 that c
A privilege escalation vulnerability was reported in the LenovoSystemUpdatePlugin for Lenovo System Interface Foundation
A potential vulnerability was reported in Lenovo System Interface Foundation versions before v1.1.18.3 that could allow
A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundation
A vulnerability was reported in LenovoAppScenarioPluginSystem for Lenovo System Interface Foundation prior to version 1.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today