Lenovo Vantage and Baiying Input Validation Vulnerability in Productivity Add-in Allowing Privileged Process Termination

An input validation vulnerability exists in the LenovoProductivitySystemAddin component of Lenovo Vantage and Lenovo Baiying. This vulnerability could enable a local authenticated user to terminate arbitrary processes with elevated privileges. The issue arises from inadequate input validation, allowing for unauthorized process termination.

Impact

Exploitation of this vulnerability could lead to unauthorized termination of processes, potentially disrupting services or applications that rely on those processes.

Remediation

Users should update the Lenovo Vantage LenovoProductivitySystemAddin to version 1.0.0.138 or later. This add-in is automatically updated by Lenovo Vantage.