Lenovo Solution Center (LSC) before 3.3.003 allows local users to execute arbitrary code with LocalSystem privileges via vectors involving the LSC.Services.SystemService StartProxy command with a named pipe created in advance and crafted .NET assembly.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Solution_center | Lenovo | * | 3.3.002 (including) |