7.5
High
CVE-2024-4696 A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow…
Description
A privilege escalation vulnerability was reported in Lenovo Service Bridge prior to version 5.0.2.17 that could allow operating system commands to be executed if a specially crafted link is visited.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Service Bridge 5.0 | earliest → < 5.0.2.17 | 5.0.2.17 |
| service_bridge 5.0 | earliest → < 5.0.2.17 | 5.0.2.17 |
Other CVEs of Service Bridge
The 6 CVEs of Service Bridge →
CVE-2026-1636
A potential DLL hijacking vulnerability was reported in Lenovo Service Bridge that, under certain conditions, could…
5.4
Medium
CVE-2019-6166
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery
5.4
Medium
CVE-2019-6167
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution
8.8
High
CVE-2019-6168
A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution
8.8
High