1206 matches found
XClarity Administrator (LXCA) Service Data May Include Proxy Credentials - US
Lenovo Security Advisory: LEN-26141 Potential Impact: Information disclosure Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6158 Summary Description: An internal product security audit of Lenovo XClarity Administrator LXCA discovered HTTP proxy credentials being written ...
Intel DCI Policy Update - US
Lenovo Security Advisory: LEN-23611 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3652 Summary Description: Intel is releasing Direct Connect Interface DCI policy update. Existing UEFI setting restrictions for...
Intel Graphics Driver for Windows - Lenovo Support US
Lenovo Security Advisory: LEN-36229 Potential Impact: Escalation of privilege, Denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0510, CVE-2020-0512, CVE-2020-0513, CVE-2020-8679, CVE-2020-8680, CVE-2020-8681, CVE-2020-8682, CVE-2020-8683 Summary Description...
NVIDIA Windows GPU Display Driver Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-28096 Potential Impact: Code execution, denial of service, privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5683, CVE-2019-5684, CVE-2019-5685, CVE-2019-5686, CVE-2019-5687 Summary Description: NVIDIA...
SPI Protected Range Registers Affected by S3 Sleep Mode - US
Lenovo Security Advisory: LEN-26332 Potential Impact: None Severity: Low Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6156 Summary Description: In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additiona...
Intel SSD DC S4500/S4600 Series Vulnerability - US
Lenovo Security Advisory: LEN-28116 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-18095 Summary Description: Intel has reported a potential security vulnerability in Intel Solid State Drives SSD for Data Centers DC S4500/S4600 Seri...
Brocade Fabric OS Advisory - US
Lenovo Security Advisory: LEN-24765 Potential Impact: Privilege escalation, information disclosure, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-6433, CVE-2018-6434, CVE-2018-6435, CVE-2018-6436, CVE-2018-6437, CVE-2018-6438, CVE-2018-6439, CVE-2018-644...
Intel Processors Side Channel Data Leakage Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-30044 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0548, CVE-2020-0549, CVE-2020-0550 Summary Description: Intel reported potential security vulnerabilities in some Intel Processors that may allow...
Intel BIOS Platform Sample Code Advisory - Lenovo Support US
No description provided...
Lenovo Active Protection System Privilege Escalation - us
Lenovo Security Advisory: LEN-13637 Potential Impact: Privilege Escalation or Denial of Service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3740 Summary Description: During an internal assessment, a local privilege escalation vulnerability was identified in Lenovo...
POODLE: SSLv3 Vulnerability
Lenovo Security Advisory: LEN-2014-007 Potential Impact: Unauthorized Access; Man-in-the-Middle MitM Attack Severity: Medium Summary: A security vulnerability known as POODLE was publicly announced that affects a relatively low number of Internet connected devices. However, this vulnerability is...
Privilege Escalation Vulnerabilities within Lenovo Solution Center
...
Realtek Audio Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30506 Potential Impact: DLL preloading and potential abuses Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-19705 Summary Description: Realtek has released a software security update for the Realtek Audio Drivers for Windows. This update...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-24779 Potential Impact: Information disclosure, denial of service, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-6257, CVE-2018-6258, CVE-2018-6259, CVE‑2018‑6261, CVE‑2018‑6262 Summary Description: NVIDIA has released a...
Privilege Escalation Vulnerability in Lenovo CCSDK - us
Lenovo Security Advisory: LEN-11340 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8235 Summary Description: An unquoted service path vulnerability was identified in the Lenovo Customer Care Software Development Kit CCSDK that could...
NVIDIA GPU Kernel Driver Escape
Lenovo Security Advisory: LEN-5551 Potential Impact: Privilege escalation, potential information disclosure, crashes or denial of service Severity: High Scope of Impact: Industry-Wide Summary Description: On March 21, 2016, NVIDIA announced three high-severity driver vulnerabilities. These driver...
NetApp Clustered Data ONTAP Vulnerabilities - Lenovo Support US
No description provided...
Lazy FP State Restore - Lenovo Support US
No description provided...
L1 Terminal Fault Side Channel Vulnerabilities - Lenovo Support US
No description provided...
Local User Can Alter Trackpoint Functionality in Lenovo Power Management Driver - us
Lenovo Security Advisory: LEN-14440 Potential Impact: A local user could alter trackpoint functionality on the system Severity: Low Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3741 Summary Description: During an internal review, a vulnerability was identified in the Lenovo Power...
Reading Privileged Memory with a Side Channel - Lenovo Support US
No description provided...
Credentials sent through the Lenovo ToolsCenter may be exposed to local users - us
Lenovo Security Advisory: LEN-10810 Potential Impact: Sensitive information disclosure Severity: Medium Scope of Impact: Lenovo specific CVE Identifier: CVE-2017-3743 Summary Description: If multiple users are concurrently logged into a single system where one user is sending a command via the...
Denial of Service Vulnerabilities in NVidia® Drivers that affect Quadro, NVS and GeForce Windows-based Systems
Lenovo Security Advisory: LEN-9334 Potential Impact: Remote Desktop denial of service and blue screen crash Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-4959, CVE-2016-3161, CVE-2016-5852, CVE-2016-4960, CVE-2016-5025, CVE-2016-4961 Summary Description: Multiple...
Embedded Controller Update Vulnerability - US
Lenovo Security Advisory: LEN-27764 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6171 Summary Description: A vulnerability was reported in older ThinkPad systems that could allow a user with administrative privileges or physical...
Intel Accelerated Storage Manager in Intel Rapid Storage Technology Enterprise (RSTe) Vulnerabilities - US
Lenovo Security Advisory: LEN-27843 Potential Impact: Privilege escalation, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0130, CVE-2019-0135 Summary Description: Potential security vulnerabilities in Intel Accelerated Storage Manager in Intel Rapid...
Insecure Handling of UEFI Variables - US
Lenovo Security Advisory: LEN-23850 Potential Impact: Elevation of Privilege, Denial of service Severity: Medium Scope of Impact: Industry-wide Summary Description: Intel has reported to Lenovo that the BIOS reference code supplied for certain CPUs may permit an attacker to alter certain UEFI...
Security Losses from Obsolete and Truncated Transcript Hashes (SLOTH)
Lenovo Security Advisory: LEN-4603 Potential Impact: An attacker with man-in-the-middle capabilities could decrypt encrypted traffic or impersonate a legitimate client or server Severity: Medium Scope of Impact: Industry-Wide Summary Description: A flaw was found in the way the TLS 1.2 protocol...
TPM "nvLocked" Permanent Flag may not be set
Customers can use the tool provided here that will determine if the “nvLocked” TPM permanent flag is set on their system, and will automatically set the flag if it has not been set already. The program will also show the user if the user non-volatile storage area is being used in their system or...
ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-29406 Potential Impact: Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-16863 Summary Description: ST Microelectronics has reported a vulnerability in the implementation of the Elliptic Digital Signature Algorithm ECDSA...
Intel Direct Connect Interface Can Be Enabled - us
Lenovo Security Advisory: LEN-13640 Potential Impact: Denial of service or accessing of data on a system by an attacker with physical access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5684 Summary Description: In 2015, starting with the Skylake processor family, Inte...
Certain BIOS versions may include an AMI Test Key that could compromise Secure Boot protections - lu
Lenovo Security Advisory: LEN-7806 Potential Impact: Secure boot may be compromised by an attacker with local access Severity: High Scope of Impact: Lenovo-specific Summary Description: Secure Boot is a security standard to help make sure that your PC boots using only trusted software. When the P...
NetApp OnCommand System Manager 9.x Vulnerability - Lenovo Support US
No description provided...
Intel Smart Sound Technology - Lenovo Support US
Lenovo Security Advisory: LEN-30552 Potential Impact: Escalation of privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0583 Summary Description: Intel reported a potential security vulnerability in Intel Smart Sound Technology that may allow escalation of privilege...
Intel PROSet/Wireless WiFi Software Vulnerability - NL
Lenovo Security Advisory: LEN-27828 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0136 Summary Description: A potential security vulnerability in Intel PROSet/Wireless WiFi Software may allow denial of service. Mitigation Strategy for...
Intel Processors Voltage Settings Modification Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29846 Potential Impact: Escalation of Privilege, Information Disclosure Scope of Impact: Industry-wide Severity: High CVE Identifier: CVE-2019-11157 Summary Description: Intel reported a potential security vulnerability in some Intel CPUs may allow escalation of...
Intel RST Installer Vulnerability - US
Lenovo Security Advisory: LEN-25086 Potential Impact: Privilege escalation, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3635 Summary Description: A potential security vulnerability in Intel® Rapid Store Technology RST installer may allow an unprivilege...
Intel Graphics Vulnerabilities - Lenovo Support US
No description provided...
Default Privileged Account Vulnerability in the NetApp Service Processor - US
Lenovo Security Advisory: LEN-26771 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5490 Summary Description: Certain versions of the NetApp Service Processor firmware were shipped with a default account enabled that could allow...
Secure BIOS/UEFI Set-up Incomplete in Lenovo E95 and ThinkCentre M710s/M710t - us
Lenovo Security Advisory: LEN-17417 Potential Impact: Unauthorized bootloader allowed to run during system boot, reducing protection against rootkits Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3771 Summary Description: System boot process is not adequately secured...
Synaptics Fingerprint Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-31372 Potential Impact: Information disclosure, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-18618, CVE-2019-18619 Summary Description: Synaptics reported the following vulnerabilities in Synaptics Fingerprint drivers:...
Attacker with Access to LXCA Filesystem Could Access Local LXCA Account Credentials and LXCA Authenticated Command Injection - us
Lenovo Security Advisory: LEN-16333 Potential Impact: An attacker who obtains access to the location where the LXCA file system is stored could access credentials of local LXCA accounts and Privilege escalation by an authenticated user Severity: Medium to High Scope of Impact: Lenovo Specific CVE...
Some ThinkServer systems may be reset to default configurations during prolonged broadcast storm - us
Lenovo Security Advisory: LEN-9307 Potential Impact: Reset of TSM to defaults Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8236 Summary Description: A vulnerability was identified on certain Lenovo ThinkServer systems where the ThinkServer System Manager TSM may reset ...
AMI BIOS System Management Mode Vulnerability - US
Lenovo Security Advisory: LEN-24238 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Industry-wide Summary Description: AMI has reported to Lenovo that the System Management Mode SMM module was not properly validating buffers in the BIOS supplied by AMI...
AMD Secure Encrypted Virtualization (SEV) Vulnerabilities - Lenovo Support US
No description provided...
Unexpected Page Fault in Virtualized Environment Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29863 Potential Impact: Escalation of Privilege, Denial of Service, Information Disclosure Scope of Impact: Industry-wide Severity: Medium CVE Identifier: CVE-2019-14607 Summary Description: Intel reported a potential security vulnerability in multiple Intel processo...
NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - us
Lenovo Security Advisory: LEN-10962 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-7382, CVE-2016-7389 Summary Description: The NVIDIA GPU Display Driver for Linux contains two privilege escalation vulnerabilities. CVE-2016-7382...
Lenovo Mouse Suite Escalation of Privileges
Lenovo Security Advisory: LEN-2015-066 Potential Impact: Escalation of Privileges Severity: High Summary: A user with local privileges may be able to run files as an administrator in Lenovo Mouse Suite included with ThinkPad Precision Wireless Mouse –part number 0B47161. Description: The Lenovo...
Overflow in UEFI Variable Reclaim Function
Lenovo Security Advisory: LEN-2014-009 Potential Impact: Elevation of Privilege or Denial of Service Severity: Medium Summary: The EDK1 UEFI reference implementation contains a buffer overflow vulnerability. Description: Taken from US-CERT advisory The open source EDK1 project provides a referenc...
AMD Energy Driver for Linux Vulnerability (RAPL) - Lenovo Support US
No description provided...
LEN-7814 Lenovo Solution Center Arbitrary Process Termination or Code Execution by Unprivileged Local Users - my
Lenovo Security Advisory: LEN-7814 Potential Impact: Arbitrary process termination or code execution by unprivileged local users Severity: High Scope of Impact: Lenovo specific Summary Description: Local privilege escalation vulnerabilities were identified in Lenovo Solution Center where...