CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8334

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

Format string

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

Privilege escalation

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

Design/Logic Flaw

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

Code injection

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8334

CVE-2020-8334 concerns Lenovo ThinkPad BIOS tamper-detection not triggering on ThinkPad T495s, X395, T495, A485, A285, A475, A275, potentially enabling unauthorized access. The core issue, per NVD/NVD-affiliated records, is a failure in the BIOS tamper-detection mechanism (root cause not elaborat...

CVE-2020-8334

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access...

CVE-2020-8336

CVE-2020-8336 affects Lenovo ThinkPad models where Intel CSME Anti-rollback ARB protections were implemented to prevent rollback of CSME firmware in flash. The Connected documents indicate this is a firmware/boot- firmware protection mechanism, not a software vulnerability in user-space, and the ...

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash...

CVE-2020-8323

The CVE-2020-8323 issue affects Lenovo systems (ThinkPad/ThinkStation/Lenovo Notebook) via a vulnerability in the SMI callback function used by the Legacy SD driver. The underlying flaw could allow arbitrary code execution on affected devices. Public details identify the vulnerable component as t...

CVE-2020-8320

CVE-2020-8320 concerns an internal shell embedded in BIOS images for some ThinkPad models, enabling privilege escalation. The vulnerability arises in the BIOS firmware chain and affects ThinkPad-related BIOS images; root cause is an internal shell included in the BIOS image. Public sources (NVD, ...

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege...

Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US

No description provided...

PT-2020-10226 · Realtek +2 · Realtek Audio Driver +2

Name of the Vulnerable Software and Affected Versions: Realtek Audio Drivers for Windows versions prior to 6.0.8882.1 Realtek Audio Drivers for Windows versions prior to 6.0.8907.1 Description: The issue concerns the mishandling of DLL preloading by Realtek Audio Drivers for Windows, as used in...

Lenovo ThinkPad Input Validation Error Vulnerability

The Lenovo 510 15IKL and others are products of Lenovo China.The Lenovo 510 15IKL is a desktop computer.The IdeaCentre 300-20ISH is an all-in-one computer device.The IdeaCentre 510-15ICB is an all-in-one computer device.The IdeaCentre 510-15ICB is an all-in-one computer device.The IdeaCentre...

Lenovo ThinkPad Product Input Validation Error Vulnerability

The Lenovo 510 15IKL and others are products of Lenovo China.The Lenovo 510 15IKL is a desktop computer.The IdeaCentre 300-20ISH is an all-in-one computer device.The IdeaCentre 510-15ICB is an all-in-one computer device.The IdeaCentre 510-15ICB is an all-in-one computer device.The IdeaCentre...