Code injection

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8323

The CVE-2020-8323 issue affects Lenovo systems (ThinkPad/ThinkStation/Lenovo Notebook) via a vulnerability in the SMI callback function used by the Legacy SD driver. The underlying flaw could allow arbitrary code execution on affected devices. Public details identify the vulnerable component as t...

CVE-2020-8322

CVE-2020-8322 affects Lenovo Notebook and ThinkStation systems, where a vulnerability in the SMI callback function used by the Legacy USB driver could allow arbitrary code execution. The issue is tied to the Legacy USB driver’s SMI handling, with potential impact described as arbitrary code execu...

CVE-2020-8321

Lenovo System Lock Preinstallation driver contains an SMI callback vulnerability in the System Lock Preinstallation (SLP) driver affecting Lenovo Notebook and ThinkStation models, potentially allowing arbitrary code execution via the SMI handler. The issue (CVE-2020-8321) is documented with Lenov...

CVE-2020-8322

A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...

CVE-2020-8321

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...

CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8321

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...

CVE-2020-8322: Undefined Security Weakness

A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...

CVE-2020-8321: Undefined Security Weakness

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...

PT-2020-20090

Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models affected versions not specified Description A potential issue in the SMI callback function used in the Legacy SD driver may allow arbitrary code execution. This could potentially impact...

PT-2020-20089

Name of the Vulnerable Software and Affected Versions Lenovo Notebook and ThinkStation models affected versions not specified Description A potential issue in the SMI callback function used in the Legacy USB driver may allow arbitrary code execution. Recommendations At the moment, there is no...

PT-2020-20088

Name of the Vulnerable Software and Affected Versions Lenovo Notebook and ThinkStation models affected versions not specified Description A potential issue in the SMI callback function used in the System Lock Preinstallation driver may allow arbitrary code execution. Recommendations At the moment...

CVE-2020-8323: Undefined Security Weakness

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

Multi-vendor BIOS Security Vulnerabilities (June 2020) - Lenovo Support US

No description provided...

CVE-2019-6190

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep S3 on systems with Intel TXT enabled...

CVE-2019-6190

CVE-2019-6190 affects Lenovo Desktop, Desktop-All-in-One, and ThinkStation BIOS. Root cause: a denial-of-service-related issue could intermittently clear PCRs after resuming from sleep (S3) on systems with Intel TXT enabled. Affected component is the system BIOS; specifics on vulnerable versions ...

PT-2020-11195

Name of the Vulnerable Software and Affected Versions Lenovo Desktop, Desktop - All in One, and ThinkStation BIOS affected versions not specified Description A potential denial of service issue affects various versions of BIOS for Lenovo products, including Desktop, Desktop - All in One, and...

Multi-Vendor Desktop & WorkStation BIOS Security Vulnerabilities - Lenovo Support US

Lenovo Security Advisory: LEN-28078 Potential Impact: Escalation of Privilege, Denial of Service, Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-6190 Summary Description: When possible, Lenovo consolidates multiple BIOS security fixes and enhancement...

Lenovo Bootable Generator Vulnerability - US

Lenovo Security Advisory: LEN-25401 Potential Impact: Code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6154 Summary Description: A DLL search path vulnerability was reported in Lenovo Bootable Generator that could allow a malicious user with local access t...