Lenovo urges customers to uninstall dangerously flawed app from its systems

[mhm]

Exploit could lead to man-in-the-middle attack against desktop and laptop systems running the Lenovo Accelerator Application.

Chinese PC firm Lenovo has advised users of its desktop and laptop systems to uninstall a pre-loaded app that could allow hackers to execute code remotely and carry out a man-in-the-middle (MitM) attack.

In an advisory, Lenovo said the vulnerability resides within the update mechanism where a Lenovo server is queried to identify if application updates are available. Every time the app queried the server, the system could be exposed to MitM attacks.

http://www.scmagazineuk.com/lenovo-urges-customers-to-uninstall-dangerously-flawed-app-from-its-systems/article/500856/