CVE-2016-5249

—

CVSS 3.0

7.8 high

EPSS

<1%p48

Published

Jun 30, 2016 (Jun 30, 2016)

Modified

Jun 17, 2026

Description

Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly.

Vendors: lenovo
Products: solution center
Weakness: CWE-264
Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.