Lenovo Group Ltd. Smart Clock Essential SSH hard-coded password vulnerability

Talos Vulnerability Report TALOS-2023-1692 Lenovo Group Ltd. Smart Clock Essential SSH hard-coded password vulnerability April 13, 2023 CVE Number CVE-2023-0896 SUMMARY A hard-coded password vulnerability exists in the SSH, telnet functionality of Lenovo Group Ltd. Smart Clock Essential 4.9.113. ...

Information Disclosure Vulnerability in lenovonet Reporting Center

Ltd. "TGN" is a data communication solution provider in China. It specializes in the research and development, production, sales and service of data communication products, and is a national high-tech enterprise. Its predecessor is the R&D team of the Network Division of Lenovo Group, which was...

The vulnerability of microprogramming software in IBM and Lenovo laptops allows attackers to gain access to confidential information.

The microprogramming software of IBM and Lenovo laptops does not perform buffer cleanup after the password input process is completed. As a result, local malicious individuals can gain access to the BIOS password by directly reading the physical memory addresses used as buffers...