1170 matches found
Realtek Audio Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30506 Potential Impact: DLL preloading and potential abuses Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-19705 Summary Description: Realtek has released a software security update for the Realtek Audio Drivers for Windows. This update...
Intel Processors Side Channel Data Leakage Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-30044 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0548, CVE-2020-0549, CVE-2020-0550 Summary Description: Intel reported potential security vulnerabilities in some Intel Processors that may allow...
Intel Turbo Boost Max Technology 3.0 Discontinuation - US
Lenovo Security Advisory: LEN-27841 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0164 Summary Description: A potential security vulnerability in the Intel Turbo Boost Max Technology 3.0 may allow escalation of privilege. Mitigatio...
POODLE: SSLv3 Vulnerability
Lenovo Security Advisory: LEN-2014-007 Potential Impact: Unauthorized Access; Man-in-the-Middle MitM Attack Severity: Medium Summary: A security vulnerability known as POODLE was publicly announced that affects a relatively low number of Internet connected devices. However, this vulnerability is...
Privilege Escalation Vulnerabilities within Lenovo Solution Center
...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-24779 Potential Impact: Information disclosure, denial of service, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-6257, CVE-2018-6258, CVE-2018-6259, CVE‑2018‑6261, CVE‑2018‑6262 Summary Description: NVIDIA has released a...
Lenovo Active Protection System Privilege Escalation - us
Lenovo Security Advisory: LEN-13637 Potential Impact: Privilege Escalation or Denial of Service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3740 Summary Description: During an internal assessment, a local privilege escalation vulnerability was identified in Lenovo...
Privilege Escalation Vulnerability in Lenovo CCSDK - us
Lenovo Security Advisory: LEN-11340 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8235 Summary Description: An unquoted service path vulnerability was identified in the Lenovo Customer Care Software Development Kit CCSDK that could...
Local User Can Alter Trackpoint Functionality in Lenovo Power Management Driver - us
Lenovo Security Advisory: LEN-14440 Potential Impact: A local user could alter trackpoint functionality on the system Severity: Low Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3741 Summary Description: During an internal review, a vulnerability was identified in the Lenovo Power...
NVIDIA GPU Kernel Driver Escape
Lenovo Security Advisory: LEN-5551 Potential Impact: Privilege escalation, potential information disclosure, crashes or denial of service Severity: High Scope of Impact: Industry-Wide Summary Description: On March 21, 2016, NVIDIA announced three high-severity driver vulnerabilities. These driver...
NetApp OnCommand System Manager 9.x Vulnerability - Lenovo Support US
No description provided...
Intel Accelerated Storage Manager in Intel Rapid Storage Technology Enterprise (RSTe) Vulnerabilities - US
Lenovo Security Advisory: LEN-27843 Potential Impact: Privilege escalation, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0130, CVE-2019-0135 Summary Description: Potential security vulnerabilities in Intel Accelerated Storage Manager in Intel Rapid...
Denial of Service Vulnerabilities in NVidia® Drivers that affect Quadro, NVS and GeForce Windows-based Systems
Lenovo Security Advisory: LEN-9334 Potential Impact: Remote Desktop denial of service and blue screen crash Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-4959, CVE-2016-3161, CVE-2016-5852, CVE-2016-4960, CVE-2016-5025, CVE-2016-4961 Summary Description: Multiple...
Embedded Controller Update Vulnerability - US
Lenovo Security Advisory: LEN-27764 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6171 Summary Description: A vulnerability was reported in older ThinkPad systems that could allow a user with administrative privileges or physical...
Credentials sent through the Lenovo ToolsCenter may be exposed to local users - us
Lenovo Security Advisory: LEN-10810 Potential Impact: Sensitive information disclosure Severity: Medium Scope of Impact: Lenovo specific CVE Identifier: CVE-2017-3743 Summary Description: If multiple users are concurrently logged into a single system where one user is sending a command via the...
Security Losses from Obsolete and Truncated Transcript Hashes (SLOTH)
Lenovo Security Advisory: LEN-4603 Potential Impact: An attacker with man-in-the-middle capabilities could decrypt encrypted traffic or impersonate a legitimate client or server Severity: Medium Scope of Impact: Industry-Wide Summary Description: A flaw was found in the way the TLS 1.2 protocol...
TPM "nvLocked" Permanent Flag may not be set
Customers can use the tool provided here that will determine if the “nvLocked” TPM permanent flag is set on their system, and will automatically set the flag if it has not been set already. The program will also show the user if the user non-volatile storage area is being used in their system or...
Intel Graphics Vulnerabilities - Lenovo Support US
No description provided...
Insecure Handling of UEFI Variables - US
Lenovo Security Advisory: LEN-23850 Potential Impact: Elevation of Privilege, Denial of service Severity: Medium Scope of Impact: Industry-wide Summary Description: Intel has reported to Lenovo that the BIOS reference code supplied for certain CPUs may permit an attacker to alter certain UEFI...
Intel Smart Sound Technology - Lenovo Support US
Lenovo Security Advisory: LEN-30552 Potential Impact: Escalation of privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0583 Summary Description: Intel reported a potential security vulnerability in Intel Smart Sound Technology that may allow escalation of privilege...
ST Microelectronics TPM Firmware ECDSA Signature Generation Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-29406 Potential Impact: Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-16863 Summary Description: ST Microelectronics has reported a vulnerability in the implementation of the Elliptic Digital Signature Algorithm ECDSA...
Intel Processors Voltage Settings Modification Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29846 Potential Impact: Escalation of Privilege, Information Disclosure Scope of Impact: Industry-wide Severity: High CVE Identifier: CVE-2019-11157 Summary Description: Intel reported a potential security vulnerability in some Intel CPUs may allow escalation of...
Intel Direct Connect Interface Can Be Enabled - us
Lenovo Security Advisory: LEN-13640 Potential Impact: Denial of service or accessing of data on a system by an attacker with physical access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5684 Summary Description: In 2015, starting with the Skylake processor family, Inte...
AMD Secure Encrypted Virtualization (SEV) Vulnerabilities - Lenovo Support US
No description provided...
Secure BIOS/UEFI Set-up Incomplete in Lenovo E95 and ThinkCentre M710s/M710t - us
Lenovo Security Advisory: LEN-17417 Potential Impact: Unauthorized bootloader allowed to run during system boot, reducing protection against rootkits Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3771 Summary Description: System boot process is not adequately secured...
Intel RST Installer Vulnerability - US
Lenovo Security Advisory: LEN-25086 Potential Impact: Privilege escalation, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3635 Summary Description: A potential security vulnerability in Intel® Rapid Store Technology RST installer may allow an unprivilege...
Attacker with Access to LXCA Filesystem Could Access Local LXCA Account Credentials and LXCA Authenticated Command Injection - us
Lenovo Security Advisory: LEN-16333 Potential Impact: An attacker who obtains access to the location where the LXCA file system is stored could access credentials of local LXCA accounts and Privilege escalation by an authenticated user Severity: Medium to High Scope of Impact: Lenovo Specific CVE...
Some ThinkServer systems may be reset to default configurations during prolonged broadcast storm - us
Lenovo Security Advisory: LEN-9307 Potential Impact: Reset of TSM to defaults Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8236 Summary Description: A vulnerability was identified on certain Lenovo ThinkServer systems where the ThinkServer System Manager TSM may reset ...
Synaptics Fingerprint Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-31372 Potential Impact: Information disclosure, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-18618, CVE-2019-18619 Summary Description: Synaptics reported the following vulnerabilities in Synaptics Fingerprint drivers:...
Intel Processor Graphics Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30350 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14615 Summary Description: Intel reported a potential security vulnerability in Intel Processor Graphics software that may allow information...
Default Privileged Account Vulnerability in the NetApp Service Processor - US
Lenovo Security Advisory: LEN-26771 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5490 Summary Description: Certain versions of the NetApp Service Processor firmware were shipped with a default account enabled that could allow...
Lenovo StorSelect DX8200C HyperStore Use-after-free in the IPv6 implementation of the DCCP protocol in the Linux kernel - us
Lenovo Security Advisory: LEN-15183 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-6074 Summary: A vulnerability has been identified on the Lenovo StorSelect DX8200C MT 5120 running Cloudian HyperStore v6.1 and earlier. Lenovo...
Certain BIOS versions may include an AMI Test Key that could compromise Secure Boot protections - lu
Lenovo Security Advisory: LEN-7806 Potential Impact: Secure boot may be compromised by an attacker with local access Severity: High Scope of Impact: Lenovo-specific Summary Description: Secure Boot is a security standard to help make sure that your PC boots using only trusted software. When the P...
AMI BIOS System Management Mode Vulnerability - US
Lenovo Security Advisory: LEN-24238 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Industry-wide Summary Description: AMI has reported to Lenovo that the System Management Mode SMM module was not properly validating buffers in the BIOS supplied by AMI...
Unexpected Page Fault in Virtualized Environment Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29863 Potential Impact: Escalation of Privilege, Denial of Service, Information Disclosure Scope of Impact: Industry-wide Severity: Medium CVE Identifier: CVE-2019-14607 Summary Description: Intel reported a potential security vulnerability in multiple Intel processo...
Lenovo Mouse Suite Escalation of Privileges
Lenovo Security Advisory: LEN-2015-066 Potential Impact: Escalation of Privileges Severity: High Summary: A user with local privileges may be able to run files as an administrator in Lenovo Mouse Suite included with ThinkPad Precision Wireless Mouse –part number 0B47161. Description: The Lenovo...
NVIDIA Linux GPU Display Driver contains missing permissions check and improper validation vulnerabilities - us
Lenovo Security Advisory: LEN-10962 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-7382, CVE-2016-7389 Summary Description: The NVIDIA GPU Display Driver for Linux contains two privilege escalation vulnerabilities. CVE-2016-7382...
QEMU i8254 PIT Emulation Bug
Lenovo Security Advisory: LEN-2015-075 Potential Impact: Escalation of Privileges Severity: High Summary: A vulnerability was reported in QEMU where a local user on the guest system could potentially obtain elevated privileges on the target host system. This vulnerability was reported to Red Hat...
Overflow in UEFI Variable Reclaim Function
Lenovo Security Advisory: LEN-2014-009 Potential Impact: Elevation of Privilege or Denial of Service Severity: Medium Summary: The EDK1 UEFI reference implementation contains a buffer overflow vulnerability. Description: Taken from US-CERT advisory The open source EDK1 project provides a referenc...
LEN-7814 Lenovo Solution Center Arbitrary Process Termination or Code Execution by Unprivileged Local Users - my
Lenovo Security Advisory: LEN-7814 Potential Impact: Arbitrary process termination or code execution by unprivileged local users Severity: High Scope of Impact: Lenovo specific Summary Description: Local privilege escalation vulnerabilities were identified in Lenovo Solution Center where...
Lenovo XClarity Integrator Vulnerabilities - US
Lenovo Security Advisory: LEN-23800 Potential Impact: Privilege escalation, information disclosure, file system modification Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9072, CVE-2018-16093, CVE-2018-16097 Summary Description: In a recent internal audit, Lenovo...
Lenovo XClarity Administrator (LXCA) Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-29477 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6193, CVE-2019-6194, CVE-2019-19757 Summary Description: CVE-2019-6193: An information disclosure vulnerability was reported in...
Locked Data on Intel 5400s and 6000p Solid State Drives Could be Corrupted by Malware - us
Lenovo Security Advisory: LEN-15217 Potential Impact: Drive data could be corrupted by malware even when locked Severity: Medium Scope of Impact: Industry wide Summary Description: A vulnerability has been reported by Intel, a manufacturer of Solid State Drives SSDs, with the Intel models 5400s a...
Sierra Wireless WAN Driver Privilege Escalation - us
Lenovo Security Advisory: LEN-12739 Potential Impact: Local Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-9247 Summary Description: A vulnerability was identified in the Sierra Wireless WAN driver for Windows 7, 8 and 10 where a user with local...
Dynamic Power Reduction Utility Vulnerability - US
Lenovo Security Advisory: LEN-25674 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6149 Summary Description: An unquoted search path vulnerability was identified in Dynamic Power Reduction Utility, affecting ThinkPad X1 Carbon...
Intel Rapid Storage Technology (RST) Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29840 Potential Impact: Escalation of Privilege Scope of Impact: Industry-wide Severity: Medium CVE Identifier: CVE-2019-14568 Summary Description: Intel reported a potential security vulnerability in the Intel Rapid Storage Technology RST which may allow escalation ...
Intel Ethernet 700 Series Controller Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-27715 Potential Impact: Escalation of Privilege, Denial of Service, Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0139, CVE-2019-0140, CVE-2019-0142, CVE-2019-0143, CVE-2019-0145, CVE-2019-0146, CVE-2019-0147,...
Temporary Lenovo XClarity Administrator (LXCA) credentials may be exposed - us
Lenovo Security Advisory: LEN-10605 Potential Impact: Disclosure of temporary software-defined administrator credentials for LXCA by a non-privileged user Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8221 Summary Description: During an internal security review, Lenovo...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-25444 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2018‑6263, CVE‑2018‑6265, CVE‑2018‑6266 Summary Description: NVIDIA has released a software update for GeForce Experience. This upda...
LXCA and LXCI Insufficient Input Validation - US
Lenovo Security Advisory: LEN-27805 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6179, CVE-2019-6180, CVE-2019-6181, CVE-2019-6182 Summary Description: Vulnerabilities reported in Lenovo XClarity Administrator...