Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Lenovo System Update may write logs to wrong places

CVE-2019-6163 · published 7 years ago
Summary

Lenovo System Update versions before 5.07.0084 can place its service log files in unexpected locations. This could fill up storage or interfere with other applications, potentially causing the program to stop working. Update the software to the latest version to keep log files where they belong.

What to do
  • Update lenovo system_update to version 5.07.0084 or later.
Affected software
VendorProductAffected versions
lenovo system_update < 5.07.0084
cpe:2.3:a:lenovo:system_update:*:*:*:*:*:*:*:*
Original advisory text
A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations.
A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standard locations.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-404Improper Resource Shutdown or Release
Timeline
Published26 Jun 2019
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2019-6163 · NVD
Track software like this
Free during beta