NVD

Id
19684  
Name
CVE-2016-3944  
Description
UpdateAgent in Lenovo Accelerator Application allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from susapi.lenovomm.com.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-06-03  
Modified Date
2016-06-07  
Seq
2016-3944  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
107835 19684 CVE-2016-3944 https://duo.com/blog/out-of-box-exploitation-a-security-analysis-of-oem-updaters  View
107836 19684 CVE-2016-3944 https://support.lenovo.com/us/en/product_security/len_6718  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2262 JVNDB-2016-003035 Lenovo Accelerator Application の UpdateAgent における任意のコードを実行される脆弱性 Lenovo Accelerator Application の UpdateAgent には、任意のコードを実行される脆弱性が存在します。 CVE-2016-3944 90450 CVE-2016-3944 19684 9.3 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003035.html 2016-05-31 2016-06-08 View