Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo_group_ltd.:toolscenter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLenovo Group Ltd. (f9245967-9607-50cc-9335-86283a892944)
ProductToolscenter (85dfa4d4-c650-5526-a195-c03113d53c37)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-3743 vulnerable 2026-06-03 14:37:15.819022 Details available
If multiple users are concurrently logged into a single system where one user is sending a command via the Lenovo ToolsCenter Advanced Settings Utility (ASU), UpdateXpress System Pack Installer (UXSPI) or Dynamic System Analysis (DSA) to a second machine, the other users may be able to see the user ID and clear text password that were used to access the second machine during the time the command is processing.
Published: 2017-06-20T00:00:00.000Z
Updated: 2024-08-05T14:39:40.750Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.