Over 1 million tech questions and answers.

Lenovo System Update vulnerability!

Q: Lenovo System Update vulnerability!

Read other answers
RELEVANCY SCORE 200
Preferred Solution: Lenovo System Update vulnerability!

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

RELEVANCY SCORE 58

Hello, In our organization we have a VPN client that is sensative to driver versions.  We have noticed Lenovo System Update is only updating the Lenovo T470 Wireless-AC 8265 drivers to a certain point and has stopped.  That we could tell there did seem to be a problem as previously there was a rapid succession of updates for our T470's and the wireless NICs to a certain point.T470 - 20HES09L00 Would it be possible to have this driver updated? 2018/09/03 - v20.70.3.3 - Lenovo2019/03/06 - v20.120.1.1 - Intel  Thank you,Tony H. 

A:Lenovo T470 - Intel Dual Band Wireless-AC 8265 - Lenovo System Update - Wireless AC Driver Update

I noticed this apparent divergence on my T480, so I manually installed thev20.120.1.1 driver direct from the  Intel site. When it got done installing, Device manager (Windows 10 Pro 64-bit) reported that I STILL was using the same version as offered by Lenovo:  v20.70.3.3 - Lenovo





If a post answers your question, please mark it as an ?Accepted Solution?!If a post helps you, please click the star to give it a Kudo~~Some years back I worked for IBM, currently I do not work for,nor do I speak for Lenovo or IBM.

Read other 1 answers
RELEVANCY SCORE 56

I hope this is the correct place to post - did not see a E series in the ThinkPad Board... I am getting an error when trying to update to Lenovo System Update version 5.07.0065.I recently upgraded the computer form Windows 7 to Windows 10. Trying to make sure my drivers were up-to-date I ran across the newer version of the System Update app. When I tried to install, it gave me this error:The old version is now none existant in Programs and Features. Any ideas? All are appreciated!  Thanks.

Read other answers
RELEVANCY SCORE 55.6

Hi,I have recently acquired Lenovo Thinkpad T500 and I am coming across several issues. Having resolved few, here is the one I cannot find help anywhere.Trying to use Lenovo System Update I get the message "The System Update Server is invalid. Please contact Support Center"....which I would do (contact support) if only T500 was listed as one of your products, while it is not - why is it?The version of the System Update is 5.07.0061 I will be really grateful for any help, because google-resolving these issues took me 2 days already. Thank you.

Read other answers
RELEVANCY SCORE 54

T460p here. After I updated my Windows 10 to Fall Creator Update - Lenovo System Update Shows 11 Updates that are already installed - so it want's to install the same drivers over and over again. Probably a bug. Anyone with the same experience?

Read other answers
RELEVANCY SCORE 54

Hello,I have a Lenovo Thinkpad W540 which is out of warranty.  While using the Lenovo System Update utility to update the BIOS, the BIOS update failed, and now my W540 will no longer boot.  Is there a way to restore the BIOS without replacing the system board? Is there a place where can I download the BIOS file (not only the upgrade utility)? Thank you!

Read other answers
RELEVANCY SCORE 53.6

I've been getting the "Thread Stuck in Driver" BSOD when playing games for several months now and have just been trying to ignore it. However, it's gotten too bad to be ignored any longer. I've been trying to download a BIOS update (as another thread on this topic suggested) but the System Update program refuses to download the BIOS update it says I need every single time. I can provide more info on my system if necessary.  Thanks for the help.

Read other answers
RELEVANCY SCORE 53.6

I am unable to update any X2xx laptops due to the package catalog being updated for the last 2 days.Please fix as this is impacting our laptop builds for new users

Read other answers
RELEVANCY SCORE 53.2

This use to work fine but now it doesnt. I am running a THINKPAD-X1-CARBON-6TH-GEN-TYPE-20KH-20KG. The sticker says 20KH-002JUS.

A:X1 Gen 6 lenovo update The package catalog for your system is currently being updated on the System

Oh I tried to reinstall the utility and same thing. 

Read other 1 answers
RELEVANCY SCORE 52.4

I want to update my biosbut there is a little problem , as you know for this update battery has to be fully charged and notebook plugged inMy battery still works but at least this program ( lenovo system update as mentioned above )says i need fully charged battery but it is already charged ( most of the time laptop is plugged in workstation )anybody any ideas how to get it working ?

Read other answers
RELEVANCY SCORE 52.4

What is happening with Lenovo System Update? We are getting an error that the package catalog is being updated? We have several models here and its happening on all of them. I can't find anything relating to this update on any Lenovo site, and the response I got from calling support was "Sorry." They were also not able to tell me when they think this will be fixed. EDIT: Spelling.

























LSU.jpg ?19 KB

Read other answers
RELEVANCY SCORE 52

   when a fix will be up? tools https://downloadcenter.intel.com/download/27150

Read other answers
RELEVANCY SCORE 50.4

Hello everybody. I have V310 series notebook. Lenovo system update software gives the error during updating process. The error window appears about that "an error occured while downloading packages". What should I do? Thank you very much for your prompt helps.

Read other answers
RELEVANCY SCORE 50.4

I see the same topic rom a few weeks back, marked as solved, but I am getting a similar problem. This is the second day.So, is this a known, temporary, situaton or has something unexpected gone wrong? I gave it a day figuring it would get fixed but it is still happening. 

Read other answers
RELEVANCY SCORE 50.4

I upgraded to Windows 10 on my ThinkPad Twist. After that, I ran Lenovo's System Update and downloaded and installed all the recommended updates. Now when I reboot I get a message saying that C:\Program Files (X86)\Thinkpad\Utilities\PWMTR64V.dll is missing. Searching the Lenovo support site for this DLL file name shows that it is related to Windows 7 Power Management. However, one of the updates from Lenovo was Power Management for Windows 10. I am hesitant to install the Power Management update for Windows 7 (which I'm guessing will solve my missing DLL problem, but maybe not) after installing such an update specific to Windows 10. But I don't want to have to have that popup message about a missing DLL every time I boot. Anyone know how I can resolved this?

A:Missing DLL after Lenovo System Update

I have a T540p (x64) and am also getting the PWMTR64V.dll that started fairly recently. It's also been updated to Windows 10 (last year), and like you, given the fix apparently relates to a Windows 7 process, I'm reluctant to update/install it. I went to the pages suggested by the original solution, but both throw 404s. Not real sure where to go with this either, and on the assumption it's a bogus error for this OS/machine, I'd just as soon like to have it stop prompting if possible. elaine





-----EP PackCharlotte, NCThinkpad T540PWindows 10 ProfessionalVersion 10.0.14393 Build 14393

Read other 1 answers
RELEVANCY SCORE 50.4

I keep getting Lenovo System Update prompt lately and would like make sure that this is coming from Lenovo and legitimate.   The Prompt says "You have critical updates available fro your systme.   Lenovo recommends tha tyou instal them now to optimize your computer.   One of more of the packages may restart your systme so please save any pending workd before proceeding."   Please advise. 

Read other answers
RELEVANCY SCORE 50.4

In lenovo companion system update under the headline of installation history it shows me updates that i have already installed  and when i check for new updates it shows again the same updates. Anyone know how to fix this ?

Read other answers
RELEVANCY SCORE 50.4

Hello I have installed Lenovo System update.Lenovo System update says to me, that I can install the following applications: -Lenovo Solution Centre-Lenovo Fan Speed control driver-ThinkCentre Device experience-Desktop power manager So I do not know if I do need anything of this? Question 1:When do I need ThinkCentre Device experience? Question 2:When do I need Lenovo Fan Speed control driver? Question 3:When do I need Desktop power manager? Would appreciate your answers. Thank you.

Read other answers
RELEVANCY SCORE 50.4

Hello! I'm a bit new to GPOs and working on the server so please forgive misleading terms if I mention something that's not quite correct, but I'm trying to configure Lenovo System Update to run automatically in the background, with very little user input. We want the laptops to just grab updates directly from Lenovo so they get the latest and greatest. So when I move the ADM to the directory, this error pops up. I've been doing some research online before posting this query, but I haven't found anything that I understand that points me at a possible solution. If any of you out there in Lenovo Forum land know what I might do to fix this, I'd appreciate it! Thanks!

Read other answers
RELEVANCY SCORE 50.4

I own 2 Lenovo laptops. An ideapad y700 (still under warranty) and a flex 3 (just out of warranty). Both are in need of bios patches to address the Intel ME vulnerability, and yet nothing posted with respect to these models. Any Lenovo computer over a year old has been ignored so far. This is unacceptable Lenovo, would you please do what is right and provide us some answers?

Read other answers
RELEVANCY SCORE 49.6

Firefox 1.5.0.3 Vulnerability Update
Notification: http://isc.sans.org/diary.php?storyid=1327
Workaround:
To do so, enter in the URL bar: about:config . This will show a long list of configuration options. Search for 'warn-external.mailto' (e.g. use the 'Filter' option). By default, this value should be set to "false". Click on the line to toggle it to "true" (it will be bold if it is not set to the default).
Also:
To completely negate this vulnerability, type about:config into the Firefox location bar and press enter, type mailto, find this line:
network.protocol-handler.external.mailto
Right click the line and select toggle (to false), close and reopen Firefox. This will result in Firefox no longer opening your default email client when you click on "mailto" links, but can be easily reversed.

Settings should be (Use filter bar and type in mailto):
network.protocol-handler.expose.mailto default boolean false
network.protocol-handler.external.mailto user set boolean false
network.protocol-handler.warn-external.mailto user set boolean true

-- Tom
 

Read other answers
RELEVANCY SCORE 49.6

On Friday, SophosLabs posted news about a new Adobe Reader vulnerability believed to be in the wild (CVE-2009-3459, security posting from Adobe here). Since then a few more details have surfaced.
Readers may have seen reports of a malicious PDF in the wild exploiting this vulnerability. Sophos products already detect and block this sample as Troj/PDFJs-DS.



Update on the Adobe vulnerability | SophosLabs blog

Read other answers
RELEVANCY SCORE 49.6

So I've run Intel's vulnerability detection tool on my laptop and it says this model (700-14ISK, model 80QD) is vulnerable. I've searched the Lenovo Security Advisory LEN-17297 but my laptop isn't listed at all let alone have an update to download. I've also looked up all downloads available for my laptop on it's support page and I did run the BIOS update available - however, after the update was completed, I ran the Intel tool again and it says the system is still vulnerable. When will a security update for this issue be available or where can I find it?Thanks,-Matt

Read other answers
RELEVANCY SCORE 49.6

Lenovo Security Advisory: LEN-2015-011
Potential Impact: Execution of arbitrary code
Severity: Medium

Summary:
Multiple vulnerabilities have been identified within Lenovo System Update (previously known as ThinkVantage System Update). Lenovo has released a new version of the Lenovo System Update software that addresses these vulnerabilities.

Description:
Lenovo System Update validates all system update files as they are downloaded from the Lenovo servers. However, if the local system contains malware, it is possible that the downloaded updates could be altered before installation creating a race condition. The latest Lenovo System Update release eliminates this possibility. Lenovo System Update uses a service called SUService.exe to run system updates. As part of the authentication and validation process the service only accepts commands if a valid security token is passed along with the command. Vulnerabilities were discovered on how the security tokens were generated allowing an attacker to run commands. The latest Lenovo System Update release fixes the token authentication flaws.
Other security issues were also addressed in this update.
Mitigation Strategy for Customers (what you should do to protect yourself):
Starting from April 1, 2015, run Lenovo System Update and install the latest version of the application, version 5.06.0034 or later. You can determine the currently installed version by opening Lenovo System Update, clicking on the green question mark in the ... Read more

A:Lenovo System Update Privilege Escalation

Bundleware/ Crapware: This is why I do a clean install on a brand new PC.

Read other 1 answers
RELEVANCY SCORE 49.6

A) Why is it that inhttp://pcsupport.lenovo.com/us/en/products/laptops-and-netbooks/thinkpad-p-series-laptops/thinkpad-p...followed by entering my P50's serial numberI see updates available as optional, for example https://download.lenovo.com/pccbbs/mobiles/n1dww14w.txt (I am running Windows x64 Creators Update/1703)but in the update app (both metro and 32 bit standard app) the same patch is not listed under optional or anywhere else?  B) Why don't some recommended updates EVER show up in (any of the) the apps? I just discovered today that https://download.lenovo.com/pccbbs/mobiles/n1msk14w.txt is a recommended update. I've used the update app several times since March 30th, but I am still running 1.82.00.07 when I should be running 1.82.0.14 or later.C) Is there a delay in making the updates available thru the apps vs when they become available via the site?Please advise. I'd like to have to follow only 1 update information source, preferably the standard windows (non metro) app, since I can't hide updates in the metro app.

Read other answers
RELEVANCY SCORE 49.6

Just so everyone knows . . . don't rely on the System Update function of Lenovo Companion to update your machine. I used it today and it told me all was good. However, when I checked the Drivers and Software section of the Support Site, it showed a new version of Lenovo Software Foundation and App Explorer to download. In a word, the System Update function is "no bueno".

Read other answers
RELEVANCY SCORE 49.6

Hello! My wifi stoped working and I updated all drivers and it didn't work. Then for the last thing I've updated the bios from 9acn28ww to 9acn32ww from the site. It went OK, but now that I try to acess the setup I'm prompted by a system password I didn't set earlier, it was empty. It came with Windows 8 installed, but I was using Windows 7 with MBR partition and now I can't configure to Legacy and nothing... Is there any default password like "password" ? Thanks in advance!

Read other answers
RELEVANCY SCORE 49.6

Hope someone here can help me. I have a X1 Carbon 6th generation - but when trying to search for system updates using Lenovo Advantage, the search fails at about 96% presenting the following error message. This error message also pops up out of the blue from time to time without any logical reason. I have tried changing ownership of the file, removing write protection, restarting, rebooting, you name it.The IT department has done god knows what to get rid of this error message, but it keeps turning up again and again.Has anyone got any solution to this annoying problem?If so I would be so thankful

Read other answers
RELEVANCY SCORE 49.6

Starting this morning, my Lenovo Yoga 910 IKB appears to go through a system update . It has been going on for quite some time, the update takes up to 30% of the CPU and my battery life has decreased substantially. In addition, it says that it is a Lenovo System Update(32 bit), while I know that my system runs on 64 bit. My questions are:1. How long should a system update take?2. Is it normal that the system update is 32 bit?3. If it is not normal, how do I stop the system update and how do I run a 64 bit one?Thank you!

Read other answers
RELEVANCY SCORE 49.6

Since you have to hunt around different Lenovo sites (and other sites) to find out about these softwares, I decided to make a post to get feedback from actual Yoga owners on how these programs interact, what they do, which ones are prerequisite, and which ones are unnecessary. Please don't take this as a blanket answer. This is just what I have found. It might be right - it might be wrong. I'm looking for others to post their experiences as well. Lenovo System Interface Foundation Driver - Necessary prerequisite (missing driver in device manager without it). It allows the Lenovo Utility and Lenovo Companion to work. Lenovo Yoga Mode Control - Necessary if you want to use your yoga to seemlessly change between all the different modes (laptop, tablet, tent, stand). This software is responsible for autorotating and putting Windows into tablet mode. Lenovo Utility - Recommended(?) This one I'm not too sure on. I remember that I was missing some function that I wanted but I can't remember what it was now. Maybe battery cycle count and health? Lenovo Companion - I don't have this one installed and don't think it's necessary but would like someone else to shed some light here.

Read other answers
RELEVANCY SCORE 49.2

Hello Forum Users,

This link here:

Deep down I think I know the answer, but for some unknown reason my Bullguard AV vulnerability report highlights Mozilla Firefox latest update as a threat !?

This to me appears silly. But I'm scared to download the update just incase ?

What exactly shall I do?

Many thanks

Regards
 

Read other answers
RELEVANCY SCORE 49.2

I recently installed Win 10 64 bit 1809 from downloaded media on my T440s with a brand new SSD. Everything works fine and is up to date. I had been interested to see how things worked before installing any Lenovo software or drivers. Now windows Update is offering "Lenovo - System 10.0.88.0":My questions:1. What exactly is this going to install?2. What Lenovo software is important to install on top of a vanilla Windows installation?3. For an older PC like the T440s, should I be relying on Lenovo or Windows to decide what drivers to install?

Read other answers
RELEVANCY SCORE 49.2

hi, I have a Lenovo T440p laptop and i kept getting the same error for some time now whenever i try running system update : system update failed to download packages.I downloaded the most recent version of lenovo system update 5.07.0045 and i still have the same error. any ideas ?thanks!

Read other answers
RELEVANCY SCORE 49.2

I am currently using a Lenovo ThinkPad T450s for about a year now and I have noticed something unusual with the System Update application. When I run the app, I stumble upon some updates that I choose to update - so far, there are a total of three updates (1 Critical Update and 2 Optional Updates). The Updates are for McAfee Firstboot Update, ThinkPad Video Features (NVIDIA N16S-GT) and Synaptics Ultranav Driver. I have installed the Critical Update numerous times, but that item is there every time I boot up the app again (with note that I nowadays use Windows Defender as my main Security app as opposed to McAfee which has already expired) together with the other two Optional Updates (the Video Features update I deferred its installation for the first time and when I ran installation, it caused my computer to reboot with the stop code critical structure corruption - since then I left it alone, but I sometimes experience the computer briefly crashing before it starts operating fine again; whereas with the Ultranav Driver I run it through, but after sometime my system tells me that the installation can't proceed on due to failure in closing some apps and/or overwrite some older files - ever since I got a different version of the same Driver, though that Driver remains as an Optional Update). What I'm saying is that all three Updates always pop up after running for new Updates in the System Update app - even after rebooting my system. I know this is a lot to ... Read more

Read other answers
RELEVANCY SCORE 49.2

Hi there, I have a T460s and when running Lenovo System Update, there are a couple of updates that are suggested, but I have that version already installed. Is this a bug in the System Update application? Examples:Lenovo Power Management Driver - 10 [32,64]It shows:Version: 1.67.12.16 Installed Version: 1.67.12.16 If I try to install it, after successful installation next time System Update runs it again suggests to install this "update". Similarly under Optional updates it showsRealtek Audio Driver - 10 [64]Version: 6.0.1.7898However when I look up the details and check which version I currently have, it is exactly the same version. And also here if I try to install the update, next time System Update again suggests I have this update available. I find this all a bit strange. Thanks,Jorik 

Read other answers
RELEVANCY SCORE 49.2

Iīve got  problems  when  upgrading  Itunes vers  12.5  to 12.9 on windows  7 64 bit se  report on windows installer " missing  1 cache product file "Report says i have to rebuild x250 computer ! Isnīt there a another way lenovo system update is also not possible to run , stops at  97%  /M Report on Windows Installer Cache for X250-DATOR 1 Missing Cache Product Files (.MSI) 0 Missing Cache Patch Files (.MSP) 127 Total Packages Installed0 Missing Cache Patch Files (.MSP) 1 Missing Cache Product Files (.MSI)Product NameLenovo System UpdatePackage Name Product Code{8675339C-128C-44DD-83BF-0A5D6ABD8297}Local Package Publisher URLUpdateInfo URLInfoAbout Help Telephone InstallLocation AssignmentTypePer-MachineHelpLink InstallDate InstallSource Action RequiredThis .msi appears to be missing. Machine needs to be rebuilt.

Read other answers
RELEVANCY SCORE 49.2

Is there any solution to constant system failure to a level where the blue screen turns up and laptop can't be even turned on, after every system update?

I've checked the drivers and everything, but since the big update pack somewhere in March every update ends up in system failure. And the restore points before the updates are useless, because system doesn't recognize them.

After the second time this has happened and I've lost all the files that has not been backed up on hard drive I really start to think is there something wrong to Lenovo and Windows 7 combination?

I almost start to regret that I have legal version with update option.

A:System crash after every attempt to update Windows 7 64 bit on Lenovo

* It would be very helpful if we had your System Specs to know what we are dealing with...
System Info - See Your System Specs

* Have you received any error messages?

* Have you a Win 7 disk?

* IF you are having Blue Screens of Death

We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.
Please attach the DMP files to your next post not to post one.

If you are overclocking STOP

You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

The procedure:





Quote:
* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button.
*If the files are too large please upload them to a file sharing service like "Rapidshare" and put a link to them in your reply.


To ensure minidumps are enabled:





Quote:
* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb var... Read more

Read other 2 answers
RELEVANCY SCORE 49.2

Lenovo System Update 5.0.3 failes to download packages - ADUP Failed 

Read other answers