System Update Vulnerability - Lenovo Support US

Lenovo Security Advisory: LEN-28093

Potential Impact:: Denial of Service

Severity: Medium

Scope of Impact: Lenovo-specific

CVE Identifier: CVE-2019-6175

Summary Description:

A denial of service vulnerability was reported in Lenovo System Update that could allow configuration files to be written to non-standard locations.

Mitigation Strategy for Customers (what you should do to protect yourself):

Upgrade to the Lenovo System Update version 5.07.0088 (or newer)