5651 matches found
SMM
No description provided...
Intel BIOS locking mechanism contains race condition that enables write protection bypass - Lenovo Support US
No description provided...
S3 Boot Script Protection - Lenovo Support US
No description provided...
The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality of protected information.
The vulnerability exists in Web Navigator of Siemens WinCC due to the different behaviors of NetBIOS user names, depending on whether a user account exists or not. Exploiting this vulnerability allows remote users who have been authenticated to list user accounts using specially crafted URL...
The vulnerability of microprogramming software in IBM and Lenovo laptops allows attackers to gain access to confidential information.
The microprogramming software of IBM and Lenovo laptops does not perform buffer cleanup after the password input process is completed. As a result, local malicious individuals can gain access to the BIOS password by directly reading the physical memory addresses used as buffers...
Scope of ThinkPwn UEFI Zero Day Expands
A serious hardware vulnerability, thought to be confined to UEFI drivers in Lenovo and HP laptops, has also been found in firmware running on motherboards sold by Gigabyte. The flaw was publicly disclosed last week by researcher Dmytro Oleksiuk. No patches are yet available. Oleksiuk said the fla...
Lenovo ThinkPad BIOS System Management Mode Arbitrary Code Execution Vulnerability
BIOS Basic Input/Output System i.e. Basic Output Input System is the most basic software code loaded on the computer hardware system. The Lenovo ThinkPad BIOS has a security vulnerability that can be exploited by an attacker with local administrative access to execute arbitrary code, disable flas...
Vulnerability of the Windows operating system and the Internet Explorer browser, allowing attackers to increase their privileges
The vulnerability of the Web Proxy Auto Discovery protocol for the Windows operating system and the Internet Explorer browser is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely by using the NetBIOS name...
CVE-2016-5729
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...
Code injection
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...
CVE-2016-5729
CVE-2016-5729 is a Lenovo BIOS EFI Driver SMM code-execution vulnerability. A local attacker with administrative privileges can run arbitrary code in System Management Mode. Connected Lenovo advisory LEN-4901 confirms impact and provides per-product minimum fix versions (BIOS updates) to mitigate...
CVE-2016-5729
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...
SMRAM data may be viewed on ThinkPad systems
Lenovo Security Advisory: LEN-3837 Potential Impact: Leakage of SMRAM data Severity: Low Summary: An attacker may be able to view but not modify the contents of System Management RAM SMRAM data on certain Lenovo ThinkPad systems. Description: SMRAM is a part of system memory used by the processor...
TPM "nvLocked" Permanent Flag may not be set
Customers can use the tool provided here that will determine if the “nvLocked” TPM permanent flag is set on their system, and will automatically set the flag if it has not been set already. The program will also show the user if the user non-volatile storage area is being used in their system or...
SMRAM data may be viewed on ThinkPad systems - Lenovo Support US
No description provided...
Lenovo Service Engine (LSE) BIOS for Notebook
Lenovo Security Advisory: LEN-2015-020 Potential Impact: Privilege Escalation Severity: High Summary: Vulnerabilities have been identified in the Lenovo Service Engine LSE which may run on certain Lenovo notebook systems that do not have a Lenovo preloaded operating system installed. Lenovo has...
ThinkServer *50-series BIOS Password Encryption Weakness
Lenovo Security Advisory: LEN-2015-018 Potential Impact: Password Disclosure Severity: Low Summary: The ThinkServer 50-series of servers store user and administrator BIOS passwords using a legacy, proprietary form of encryption. This issue was found during an internal security review and correcte...
ThinkCentre Hard Disk Password Bypass
Potential Impact: Severity Summary Description: Mitigation Strategy for Customers what you should do to protect yourself: Update to the latest BIOS for the affected ThinkCentre by following the instructions in the readme file from the links below. Users can also update their BIOS through Lenovo...