Details of VAR-201606-0024

ID

VAR-201606-0024

CVE

CVE-2016-3944

TITLE

Lenovo Accelerator Application of UpdateAgent Vulnerable to arbitrary code execution

Trust: 0.8

sources: JVNDB: JVNDB-2016-003035

DESCRIPTION

UpdateAgent in Lenovo Accelerator Application allows man-in-the-middle attackers to execute arbitrary code by spoofing an update response from susapi.lenovomm.com. Lenovo Accelerator Application is prone to a remote code-execution vulnerability.. Lenovo Accelerator Application is a set of acceleration programs specially designed for Intel chipsets by China Lenovo (Lenovo)

Trust: 1.98

sources: NVD: CVE-2016-3944 // JVNDB: JVNDB-2016-003035 // BID: 91035 // VULHUB: VHN-92763

AFFECTED PRODUCTS

vendor:	lenovo	model:	accelerator application	scope:	eq	version:	-	Trust: 1.6
vendor:	lenovo	model:	accelerator application	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2016-003035 // CNNVD: CNNVD-201606-131 // NVD: CVE-2016-3944

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-3944
value:	HIGH
Trust: 1.0
NVD:	CVE-2016-3944
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201606-131
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-92763
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2016-3944
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-92763
severity:	HIGH
baseScore:	9.3
vectorString:	AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.6
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-3944
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.6
impactScore:	5.9
version:	3.0
Trust: 1.8

sources: VULHUB: VHN-92763 // JVNDB: JVNDB-2016-003035 // CNNVD: CNNVD-201606-131 // NVD: CVE-2016-3944

PROBLEMTYPE DATA

problemtype:

CWE-20

Trust: 1.9

sources: VULHUB: VHN-92763 // JVNDB: JVNDB-2016-003035 // NVD: CVE-2016-3944

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201606-131

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201606-131

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-003035

PATCH

title:	LEN-6718	url:	https://support.lenovo.com/jp/ja/product_security/len_6718	Trust: 0.8
title:	Lenovo Accelerator Application Repair measures for man-in-the-middle attack vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=62099	Trust: 0.6

sources: JVNDB: JVNDB-2016-003035 // CNNVD: CNNVD-201606-131

EXTERNAL IDS

db:	NVD	id:	CVE-2016-3944	Trust: 2.8
db:	JVNDB	id:	JVNDB-2016-003035	Trust: 0.8
db:	CNNVD	id:	CNNVD-201606-131	Trust: 0.7
db:	BID	id:	91035	Trust: 0.4
db:	VULHUB	id:	VHN-92763	Trust: 0.1

sources: VULHUB: VHN-92763 // BID: 91035 // JVNDB: JVNDB-2016-003035 // CNNVD: CNNVD-201606-131 // NVD: CVE-2016-3944

REFERENCES

url:	https://support.lenovo.com/us/en/product_security/len_6718	Trust: 1.7
url:	https://duo.com/blog/out-of-box-exploitation-a-security-analysis-of-oem-updaters	Trust: 1.7
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-3944	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-3944	Trust: 0.8
url:	http://www.lenovo.com/ca/en/	Trust: 0.3

sources: VULHUB: VHN-92763 // BID: 91035 // JVNDB: JVNDB-2016-003035 // CNNVD: CNNVD-201606-131 // NVD: CVE-2016-3944

CREDITS

Mikhail Davidov, Sr. Security Researcher, Duo Security.

Trust: 0.3

sources: BID: 91035

SOURCES

db:	VULHUB	id:	VHN-92763
db:	BID	id:	91035
db:	JVNDB	id:	JVNDB-2016-003035
db:	CNNVD	id:	CNNVD-201606-131
db:	NVD	id:	CVE-2016-3944

LAST UPDATE DATE

2025-04-13T23:38:59.760000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-92763	date:	2016-06-07T00:00:00
db:	BID	id:	91035	date:	2016-05-31T00:00:00
db:	JVNDB	id:	JVNDB-2016-003035	date:	2016-06-08T00:00:00
db:	CNNVD	id:	CNNVD-201606-131	date:	2016-06-06T00:00:00
db:	NVD	id:	CVE-2016-3944	date:	2025-04-12T10:46:40.837

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-92763	date:	2016-06-03T00:00:00
db:	BID	id:	91035	date:	2016-05-31T00:00:00
db:	JVNDB	id:	JVNDB-2016-003035	date:	2016-06-08T00:00:00
db:	CNNVD	id:	CNNVD-201606-131	date:	2016-06-06T00:00:00
db:	NVD	id:	CVE-2016-3944	date:	2016-06-03T14:59:05.280