CVE-2016-5249
HighSummary
Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges. This is exploited via the StartProxy command of the LSC.Services.SystemService with a previously created named pipe and a crafted .NET assembly.
Risk Assessment
Exploitation of this vulnerability could allow a local user to gain control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update Lenovo Solution Center to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Lenovo Solution Center
Original NVD description (English source)
Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly.