Lenovo Solution Center, candidate removal of bloatware

[Rotozaza]

Is Lenovo Solution Center a candidate for removal of bloatware?

Add on question: Which Lenovo App might have reinstalled SHAREit after I've uninstalled it?

[someotherguy · Accepted solution]

Lenovo Solution Center is not needed for your system to function normally.  You can decide to remove it, or not.  Totally up to you.

There was a period of 2-3 days near the end of October where Lenovo System Update would wrongly install a new version of SHAREit even if it had been uninstalled previously.  This problem should not happen again.  Sorry for the trouble.

[Rotozaza]

I removed Solution Center a week ago. All other Lenovo stuff work well. SHAREit stays removed.

[Rotozaza]

Is Lenovo Service Bridge a candidate for removal of bloatware?

As it's only used once, I recommend to remove it... after using it once.

Better take photo of type and serial on the back and save it to desktop and mobile, somewhere you store other, similar infos. Find Product Name & Serial Number - Lenovo Support (US)

Of course I read: Getting Started with Lenovo Service Bridge - Lenovo Support (US) 

Problem 1: ping pong between US and Central Europe Support front ends, I couldn't register my machine manually on US, so I installed LSB... PS: I stil couldn't register warranty extension, and support in Europe isn't quite supportive.

Problem 2: Lenovo Service Bridge doesn't work at my Yoga 15, it detects Yoga 15 but not serial and shows data sheet with variables, not data.

I recommend Lenovo should have only one support front end. Probably they consoldiate, and this creates confusion on client (me) side.

[marksit]

Lenovo Solution Center

Advise immediate removal

http://www.pcworld.com/article/3012061/security/vulnerabilities-found-in-lenovo-toshiba-dell-support...

also see Lenovo security advisory LEN-4326

https://support.lenovo.com/au/en/product_security/len_4326

remove it. 

From CERT..https://www.kb.cert.org/vuls/id/294607

Impact

By convincing a user who has launched the Lenovo Solution Center to view a specially crafted HTML document (e.g., a web page or an HTML email message or attachment), an attacker may be able to execute arbitrary code with SYSTEM privileges. Additionally, a local user can execute arbitrary code with SYSTEM privileges.

Solution

The CERT/CC is currently unaware of a practical solution to this problem. However, please consider the following workaround:

Uninstall or close Lenovo Solution Center
Uninstall Lenovo Solution Center to prevent exploitation of these vulnerabilities. Closing any running instance of Lenovo Solution Center also prevents exploitation.

[David22]

Lenovo has released two updated versions of Lenovo Solution Center for different versions of Windows operating systems that address these vulnerabilities. Lenovo is providing these updates through several channels as described in the above security advisory, updated with LSC fix version information on 12-11-15.

Product Impact:

Versions earlier than 2.8.006 or 3.2.0002 of Lenovo Solution Center may be impacted by these vulnerabilities.

Identifying which version of Lenovo Solution Center is installed on your system:

Lenovo Solution Center version 2.x.x was designed for Windows 7, Windows 8 and Windows 8.1. If you have Lenovo Solution Center version 2.x.x installed, please update to version 2.8.006 or a later 2.x.x version. 

Lenovo Solution Center version 3.x.x was designed for Windows 10. If you have Lenovo Solution Center 3.x.x installed, please update to version 3.2.002 or later.

Note:  If you migrated from Windows 7, 8 or 8.1 to Windows 10, and you had Lenovo Solution Center v2.x.x installed prior to migrating, you may still have version 2.x.x installed. Lenovo Solution Center is not automatically uninstalled or upgraded during the migration.

To view your current version number, open the Lenovo Solution Center and click on the blue question mark in the upper right corner if you are running version 2.x.x and the lowercase ‘i’ in the upper right corner if you are running version 3.x.x.