Menu
Lenovo advises users to remove a vulnerable support tool preinstalled on their systems

Lenovo advises users to remove a vulnerable support tool preinstalled on their systems

Lenovo Accelerator Application contains a high-risk vulnerability that allows remote code execution

PC maker Lenovo is recommending that users remove an application preloaded on their computers because it contains a high-severity flaw that could allow attackers to take over their systems.

The vulnerable tool is called Lenovo Accelerator Application and is designed to speed up the launch of other Lenovo applications. It was preinstalled on more than 100 laptop and desktop models shipped with Windows 10, but not those from the ThinkPad and ThinkStation lines.

The flaw was discovered by researchers from security firm Duo Security as part of an analysis of OEM software update tools from five PC manufacturers. The company found that a process called LiveAgent, apparently the update component of the Lenovo Accelerator Application, does not use encrypted connections when checking and downloading updates. LiveAgent also does not validate the digital signatures of the downloaded files before running them, the researchers said.

This allows man-in-the-middle attackers who can intercept a user's traffic -- for example, on an insecure Wi-Fi network or through a compromised router -- to trick LiveAgent into downloading and executing malware.

LiveAgent was one of the worst software updaters Duo Security identified, but the company found flaws in update tools from all five vendors: Acer, ASUSTeK Computer, Lenovo, Dell, and HP.

"Lenovo recommends customers uninstall Lenovo Accelerator Application by going to the 'Apps and Features' application in Windows 10, selecting Lenovo Accelerator Application and clicking on 'Uninstall'," Lenovo said in an advisory Tuesday,

The company plans to release a System Update removal utility soon, a Lenovo representative said in an emailed statement.

This is not the first time serious vulnerabilities have been found in the support tools and third-party applications preloaded by PC manufacturers on computers. The Duo Security researchers recommend installing a clean version of Windows on newly purchased systems.


Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Featured

Slideshows

Sizing up the NZ security spectrum - Where's the channel sweet spot?

Sizing up the NZ security spectrum - Where's the channel sweet spot?

From new extortion schemes, outside threats and rising cyber attacks, the art of securing the enterprise has seldom been so complex or challenging. With distance no longer a viable defence, Kiwi businesses are fighting to stay ahead of the security curve. In total, 28 per cent of local businesses faced a cyber attack last year, with the number in New Zealand set to rise in 2017. Yet amidst the sensationalism, media headlines and ongoing high profile breaches, confusion floods the channel, as partners seek strategic methods to combat rising sophistication from attackers. In sizing up the security spectrum, this Reseller News roundtable - in association with F5 Networks, Kaspersky Lab, Tech Data, Sophos and SonicWall - assessed where the channel sweet spot is within the New Zealand channel. Photos by Maria Stefina.

Sizing up the NZ security spectrum - Where's the channel sweet spot?
Show Comments