High severity · published May 4, 2018
CVE-2018-9063
MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very…
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program's buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SU
System Update · Lenovo
before 5.07.0072 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-9063
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-9063
Third Party Advisory
http://www.securityfocus.com/bid/104125
Vendor Advisory
https://support.lenovo.com/us/en/solutions/LEN-19625
More from System Update
7.8
CVE-2023-4632
An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges
7.8
CVE-2022-0354
A vulnerability was reported in Lenovo System Update that could allow a local user with interactive system access the ability to execute code with elevated privileges only during…
7.8
CVE-2015-7334
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA
7.8
CVE-2015-7333
MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA
7.8
CVE-2015-6971
Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the System Update service (SUService.exe) and gain privileges…