# MA-613.062016: MyCERT Advisory - Lenovo Accelerator Application Vulnerability

**Date:** 03 Jun 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-613.062016  
**Advisory ID:** MA-613.062016

---

####
**1.0 Introduction**
Lenovo has issued a security advisory to address a vulnerability in the Accelerator Application software. Products affected by this vulnerability include the Lenovo notebook and desktop systems preloaded with the Windows 10 operating system. Users and administrators are encouraged to review the Lenovo Security Advisory and apply the recommended mitigation strategy.
**2.0 Impact**
Exploitation of this vulnerability may allow a remote attacker to take control of an affected system.
**3.0 Affected Products**
Note: Lenovo ThinkPad and ThinkStation devices are not affected by this security issue.
**Notebook models:**
305
700
300S
500/500S
B40-30/B40-45/B40-45/B40-80
B41-30/B41-35/B41-80
B50-30/B50-30 Touch/B50-45/B50-80/B51-30/B51-35/B51-80
E31-70/E31-80/E40-30/E40-80/E41-80/E50-30/E50-80/E51-80
Edge 15
Edge 2-1580
Erazer N40-30/Erazer N40-45
Erazer N50-45/Erazer N50-45
Erazer Z41-70
Erazer Z51-70
FLEX 2 Pro
FLEX 3
FLEX 4
K20-80
K21-80
K41-70/K41-80
M41-70
M51-80
MIIX 3
MIIX 700
N41-35
N51-35
S21e-20
S41-35/S41-70/S41-75
TianYi 300
U31-70
U41-70
V4000
XiaoXin 700
Y50-70/Y50-70 Touch
Y50c
Y700/Y700 Touch
Y70-70 Touch
Y900
Yoga 2
YOGA 3 14
Yoga 3 Pro
Yoga 300
YOGA 500/YOGA 510
YOGA 700/YOGA 710/YOGA 900/YOGA 900S
Z41-70
Z51-70
**Desktop models:**
50050C/50100E/50550A/50600I
A3300
A7300
A8150
B40
C20
C40
C50
C560
D3000
D5010/ D5050/ D5055
F5005/ F5050/ F5055
G5005/ G5010/ G5050/ G5055
H3005
H30-50
H5005/ H5055
H50-50
IdeaCentre 200
IdeaCentre 300/300S
IdeaCentre 510/510S
IdeaCentre 700
M7300z
M8300z/M8350z
M9550z
Yoga Home 500
**4.0 Recommendation**
Uninstall Lenovo Accelerator Application by going to the “Apps and Features” application in Windows 10, selecting Lenovo Accelerator Application and clicking on “Uninstall”.
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: [[email protected]](/cdn-cgi/l/email-protection#10736972756229292950736972756263757365627964693e7d69) or [[email protected]](/cdn-cgi/l/email-protection#4d20342e283f390d20342e283f3963223f2a632034) 
Phone: 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Mobile: +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web: [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter: <http://www.twitter.com/mycert>
Cyber999 Mobile Apps: [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0 References**
- <https://www.us-cert.gov/ncas/current-activity/2016/06/02/Lenovo-Accelerator-Application-Vulnerability>
- <https://support.lenovo.com/my/en/product_security/len_6718>