GCVE - cpe:2.3:a:lenovo:solution_center:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:solution_center:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Solution Center (`0e63d21b-c055-5b40-9a25-e2ed226e0a8d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-6177`	vulnerable	2026-06-08 05:14:09.924095	Details available HIGH (7.8) A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to non-standard locations, potentially leading to privilege escalation. Lenovo ended support for Lenovo Solution Center and recommended that customers migrate to Lenovo Vantage or Lenovo Diagnostics in April 2018. Published: 2019-08-21T19:55:05.766Z Updated: 2024-09-16T18:59:18.570Z Open on db.gcve.eu Reference links https://support.lenovo.com/solutions/LEN-27811	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5249`	vulnerable	2026-06-08 05:07:56.550419	Details available Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly. Published: 2016-06-30T16:00:00.000Z Updated: 2024-08-06T00:53:48.924Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/len_7814 https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5248`	vulnerable	2026-06-08 05:07:56.550021	Details available The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument. Published: 2016-06-30T16:00:00.000Z Updated: 2024-08-06T00:53:48.975Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/len_7814 https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-1876`	vulnerable	2026-06-08 05:07:32.155717	Details available The backend service process in Lenovo Solution Center (aka LSC) before 3.3.0002 allows local users to gain SYSTEM privileges via unspecified vectors. Published: 2017-05-23T03:56:00.000Z Updated: 2024-08-05T23:10:40.289Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/len_4326	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8536`	vulnerable	2026-06-08 05:07:04.283158	Details available MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA. A vulnerability was discovered (fixed and publicly disclosed in 2015) in Lenovo Solution Center (LSC) prior to version 3.3.002 that could allow cross-site request forgery. Published: 2020-03-27T14:05:01.000Z Updated: 2024-08-06T08:20:42.642Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/len_4326	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8535`	vulnerable	2026-06-08 05:07:04.282843	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-8534`	vulnerable	2026-06-08 05:07:04.282458	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.