6357 matches found
VulnCheck KEV: CVE-2010-0232
The kernel in Microsoft Windows, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges...
Data on SanDisk Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility
Lenovo Security Advisory: LEN-5595 Potential Impact: Drive data may be able to be recovered after running the secure erase utility Severity:Medium Scope of Impact: Lenovo Summary Description: SanDisk’s firmware used to erase the data on these SSDs did not meet Lenovo’s specifications and it was...
S3 Boot Script Protection
Lenovo Security Advisory: LEN-2014-006 Potential Impact: Elevation of Privilege Severity: Medium Summary: Certain firmware implementations may not correctly protect memory that stores the BIOS S3 Boot Script when a system is suspended. Exploitation of such vulnerabilities could potentially lead t...
Intel BIOS locking mechanism contains race condition that enables write protection bypass
Lenovo Security Advisory: LEN-2015-001 Potential Impact: Denial of Service, Elevation of Privilege Severity: Medium Summary: A race condition exists in computers using Intel chipsets that rely solely on two particular BIOS write locking mechanisms. Successful exploitation of this race condition m...
Intel BIOS locking mechanism contains race condition that enables write protection bypass - Lenovo Support US
No description provided...
Row Hammer Privilege Escalation
Lenovo Security Advisory: LEN-2015-009 Potential Impact: Escalation of Privilege Severity: Medium Summary: The Passgate issue aka “Row Hammer” is an inherent design/process limitation in memory for sub 40nm technology such as DDR3/DDR3L/LPDDR2/LPDDR3/GDDR5 that can cause errors in rows of memory...
S3 Boot Script Protection - Lenovo Support US
No description provided...
SMM
No description provided...
SMM "Incursion" Attack
Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...
The vulnerability of the Simatic PCS 7 software allows a remote attacker to compromise the confidentiality of protected information.
The vulnerability exists in Web Navigator of Siemens WinCC due to the different behaviors of NetBIOS user names, depending on whether a user account exists or not. Exploiting this vulnerability allows remote users who have been authenticated to list user accounts using specially crafted URL...
The vulnerability of microprogramming software in IBM and Lenovo laptops allows attackers to gain access to confidential information.
The microprogramming software of IBM and Lenovo laptops does not perform buffer cleanup after the password input process is completed. As a result, local malicious individuals can gain access to the BIOS password by directly reading the physical memory addresses used as buffers...
Scope of ThinkPwn UEFI Zero Day Expands
A serious hardware vulnerability, thought to be confined to UEFI drivers in Lenovo and HP laptops, has also been found in firmware running on motherboards sold by Gigabyte. The flaw was publicly disclosed last week by researcher Dmytro Oleksiuk. No patches are yet available. Oleksiuk said the fla...
Lenovo ThinkPad BIOS System Management Mode Arbitrary Code Execution Vulnerability
BIOS Basic Input/Output System i.e. Basic Output Input System is the most basic software code loaded on the computer hardware system. The Lenovo ThinkPad BIOS has a security vulnerability that can be exploited by an attacker with local administrative access to execute arbitrary code, disable flas...
Vulnerability of the Windows operating system and the Internet Explorer browser, allowing attackers to increase their privileges
The vulnerability of the Web Proxy Auto Discovery protocol for the Windows operating system and the Internet Explorer browser is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely by using the NetBIOS name...
CVE-2016-5729
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...
Code injection
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...
CVE-2016-5729
CVE-2016-5729 is a Lenovo BIOS EFI Driver SMM code-execution vulnerability. A local attacker with administrative privileges can run arbitrary code in System Management Mode. Connected Lenovo advisory LEN-4901 confirms impact and provides per-product minimum fix versions (BIOS updates) to mitigate...
CVE-2016-5729
Lenovo BIOS EFI Driver allows local administrators to execute arbitrary code with System Management Mode SMM privileges via unspecified vectors...
TPM "nvLocked" Permanent Flag may not be set
Customers can use the tool provided here that will determine if the “nvLocked” TPM permanent flag is set on their system, and will automatically set the flag if it has not been set already. The program will also show the user if the user non-volatile storage area is being used in their system or...