CVE-2016-5248

5.5 MEDIUM

Published: June 30, 2016 Modified: May 06, 2026

Description

The StopProxy command in LSC.Services.SystemService in Lenovo Solution Center before 3.3.003 allows local users to terminate arbitrary processes via the PID argument.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://support.lenovo.com/us/en/product_security/len_7814

Source: cve@mitre.org

Vendor Advisory

https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073

Source: cve@mitre.org

https://support.lenovo.com/us/en/product_security/len_7814

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2016-012/?fid=8073

Source: af854a3a-2127-422b-91ae-364da2661108

4 reference(s) from NVD

Quick Stats

CVSS v3 Score

5.5 / 10.0

EPSS (Exploit Probability)

0.1%

21th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-264

Affected Vendors

lenovo

Related CVEs