Lenovo ThinkPad T460p and T470p Unauthorized Access Vulnerability

Lenovo ThinkPad T460p and Lenovo ThinkPad T470p are both laptops from the Chinese company Lenovo Lenovo. A security vulnerability exists in the Lenovo ThinkPad T460p and T470p, which originates from a program failing to trigger the BIOS tamper checking mechanism. The vulnerability can be exploite...

Lenovo Power Management Driver 1.67.17.48 - pmdrvs.sys Denial of Service (PoC)

Lenovo Power Management Driver 1.67.17.48 - pmdrvs.sys Denial of Service PoC Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Date: 2019-12-11 Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor :...

Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service (PoC)

Exploit Title: Lenovo Power Management Driver 1.67.17.48 - 'pmdrvs.sys' Denial of Service PoC Date: 2019-12-11 Exploit Author: Nassim Asrir CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor : https://www.lenovo.com/us/en/ Ref :...

Lenovo Power Management Driver Buffer Overflow

Exploit Title: Lenovo Power Management Driver "pmdrvs.sys" - Buffer Overflow Date: 11/12/2019 Exploit Author: Nassim Asrir Contact: [email protected] | https://www.linkedin.com/in/nassim-asrir-b73a57122/ CVE: CVE-2019-6192 Tested On: Windows 1064bit | ThinkPad T470p Vendor :...

Lenovo ThinkPad USB-C Dock Denial of Service Vulnerability

The Lenovo ThinkPad USB-C Dock is an interface docking station from the Chinese company Lenovo Lenovo. A denial of service vulnerability exists in the Lenovo ThinkPad USB-C Dock with firmware version 3.7.2, which can be exploited by attackers to cause a denial of service...

CVE-2019-6176

A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service...

CVE-2019-6176

A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service...

CVE-2019-6176

The CVE-2019-6176 entry relates to Lenovo ThinkPad USB-C Dock firmware version 3.7.2, which is described as vulnerable to a denial-of-service condition. Public records in multiple sources validate the affected component as the ThinkPad USB-C Dock firmware (3.7.2) and confirm a DoS impact. Lenovo’...

CVE-2019-6176

A potential vulnerability reported in ThinkPad USB-C Dock Firmware version 3.7.2 may allow a denial of service...

Lenovo ThinkPad USB-C Dock CVE-2019-6176 Unspecified Denial of Service Vulnerability

Description Lenovo ThinkPad USB-C Dock is prone to a unspecified denial-of-service vulnerability. Successful exploits may allow an attacker to cause denial-of-service conditions. Lenovo ThinkPad USB-C Dock version 3.7.2 is vulnerable; other versions may also be affected. Technologies Affected...

ThinkPad USB-C Dock Vulnerability - Lenovo Support US

No description provided...

CVE-2019-6172

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution...

CVE-2019-6188

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access...

CVE-2019-6170

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution...

CVE-2019-6170

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution...

CVE-2019-6172

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution...

CVE-2019-6188

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access...

Code injection

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution...

Design/Logic Flaw

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access...

Code injection

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution...