Motorola Software Fix Installer Privilege Escalation Vulnerability

A DLL hijacking vulnerability has been identified in the Motorola Software Fix (Rescue and Smart Assistant) installer. This vulnerability could allow a local attacker to escalate privileges during the software installation process. The issue arises from the application’s inability to properly manage dynamic link library (DLL) files, enabling attackers to introduce malicious DLLs that could be executed with elevated rights.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a local attacker to gain elevated rights during the installation of the affected software.

Remediation

Users are advised to update the Motorola Software Fix application to version 7.3.4.13 or later. The updated version can be downloaded from the Lenovo Drivers & Software support site.