1208 matches found
Lenovo Mouse Suite Escalation of Privileges
Lenovo Security Advisory: LEN-2015-066 Potential Impact: Escalation of Privileges Severity: High Summary: A user with local privileges may be able to run files as an administrator in Lenovo Mouse Suite included with ThinkPad Precision Wireless Mouse –part number 0B47161. Description: The Lenovo...
Overflow in UEFI Variable Reclaim Function
Lenovo Security Advisory: LEN-2014-009 Potential Impact: Elevation of Privilege or Denial of Service Severity: Medium Summary: The EDK1 UEFI reference implementation contains a buffer overflow vulnerability. Description: Taken from US-CERT advisory The open source EDK1 project provides a referenc...
LEN-7814 Lenovo Solution Center Arbitrary Process Termination or Code Execution by Unprivileged Local Users - my
Lenovo Security Advisory: LEN-7814 Potential Impact: Arbitrary process termination or code execution by unprivileged local users Severity: High Scope of Impact: Lenovo specific Summary Description: Local privilege escalation vulnerabilities were identified in Lenovo Solution Center where...
Dolby DAX2 API Vulnerability - Lenovo Support US
No description provided...
Lenovo XClarity Integrator Vulnerabilities - US
Lenovo Security Advisory: LEN-23800 Potential Impact: Privilege escalation, information disclosure, file system modification Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9072, CVE-2018-16093, CVE-2018-16097 Summary Description: In a recent internal audit, Lenovo...
NVIDIA GPU Display Driver Update - Lenovo Support US
No description provided...
Intel SSD Advisory - Lenovo Support US
No description provided...
Sierra Wireless WAN Driver Privilege Escalation - us
Lenovo Security Advisory: LEN-12739 Potential Impact: Local Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-9247 Summary Description: A vulnerability was identified in the Sierra Wireless WAN driver for Windows 7, 8 and 10 where a user with local...
Temporary Lenovo XClarity Administrator (LXCA) credentials may be exposed - us
Lenovo Security Advisory: LEN-10605 Potential Impact: Disclosure of temporary software-defined administrator credentials for LXCA by a non-privileged user Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8221 Summary Description: During an internal security review, Lenovo...
System Management Mode (SMM) BIOS Vulnerability in some legacy System x servers - Lenovo Support US
Lenovo Security Advisory: LEN-38625 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8332 Summary Description: A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and...
Lenovo XClarity Administrator (LXCA) Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-29477 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6193, CVE-2019-6194, CVE-2019-19757 Summary Description: CVE-2019-6193: An information disclosure vulnerability was reported in...
Intel Ethernet 700 Series Controller Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-27715 Potential Impact: Escalation of Privilege, Denial of Service, Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0139, CVE-2019-0140, CVE-2019-0142, CVE-2019-0143, CVE-2019-0145, CVE-2019-0146, CVE-2019-0147,...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-25444 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2018‑6263, CVE‑2018‑6265, CVE‑2018‑6266 Summary Description: NVIDIA has released a software update for GeForce Experience. This upda...
Vulnerability in Service Assistance GUI for Lenovo Storage and Storwize Products - lu
Lenovo Security Advisory: LEN-18236 Potential Impact: A vulnerability in the Service Assistant GUI could allow a remote attacker to perform a privilege escalation. Severity: High Scope of Impact: Lenovo Storage/IBM Storwize CVE Identifier: CVE-2017-1710 Summary Description: A vulnerability in the...
Credential disclosure in LXCA log files - us
Lenovo Security Advisory: LEN-11635 Potential Impact: Disclosure of credentials to a non-privileged user Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8233 Summary Description: During an internal security review, log files generated by Lenovo XClarity Administrator LXCA...
Locked Data on Intel 5400s and 6000p Solid State Drives Could be Corrupted by Malware - us
Lenovo Security Advisory: LEN-15217 Potential Impact: Drive data could be corrupted by malware even when locked Severity: Medium Scope of Impact: Industry wide Summary Description: A vulnerability has been reported by Intel, a manufacturer of Solid State Drives SSDs, with the Intel models 5400s a...
Venom - Lenovo Support US
No description provided...
Intel BIOS Advisory - Lenovo Support US
No description provided...
Intel Rapid Storage Technology (RST) Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29840 Potential Impact: Escalation of Privilege Scope of Impact: Industry-wide Severity: Medium CVE Identifier: CVE-2019-14568 Summary Description: Intel reported a potential security vulnerability in the Intel Rapid Storage Technology RST which may allow escalation ...
LXCA and LXCI Insufficient Input Validation - US
Lenovo Security Advisory: LEN-27805 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6179, CVE-2019-6180, CVE-2019-6181, CVE-2019-6182 Summary Description: Vulnerabilities reported in Lenovo XClarity Administrator...
Dynamic Power Reduction Utility Vulnerability - US
Lenovo Security Advisory: LEN-25674 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6149 Summary Description: An unquoted search path vulnerability was identified in Dynamic Power Reduction Utility, affecting ThinkPad X1 Carbon...
Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - us
Lenovo Security Advisory: LEN-15765 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3756 Summary Description: A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems. An attacker wi...
Row Hammer Privilege Escalation
Lenovo Security Advisory: LEN-2015-009 Potential Impact: Escalation of Privilege Severity: Medium Summary: The Passgate issue aka “Row Hammer” is an inherent design/process limitation in memory for sub 40nm technology such as DDR3/DDR3L/LPDDR2/LPDDR3/GDDR5 that can cause errors in rows of memory...
SMM "Incursion" Attack
Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...
Intel AMT and Intel ISM Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-41856 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8758 Summary Description: Intel reported potential security vulnerabilities in Intel Active Management Technology AMT and Intel Standard Manageability...
LXCA User Account Names Exposed To Unauthenticated Users Who Can Access the Web User Interface - lu
Lenovo Security Advisory: LEN-16335 Potential Impact: LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3764 Summary Description: A vulnerability was identified in...
Lenovo XClarity Controller (XCC) Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-29116 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6195 Summary Description: An authorization bypass exists in Lenovo XClarity Controller XCC where a valid authenticated user with lesser privileges...
Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US
No description provided...
SHAREit for Android Vulnerabilities - Lenovo Support US
No description provided...
Intel Unite Client Vulnerability - US
Lenovo Security Advisory: LEN-27709 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0132 Summary Description: A potential security vulnerability in Intel Unite Client may allow denial of service. Mitigation Strategy for Customers what y...
Some Lenovo Brand Notebooks Do Not Have BIOS Write Protection Configured - us
Lenovo Security Advisory: LEN-15084 Potential Impact: Attacker with physical or administrative access could flash malicious BIOS code Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3754 Summary Description: Some Lenovo brand notebook systems do not have write protections...
Local Privilege Escalation or Denial of Service via the Intel® Graphics Driver
Lenovo Security Advisory: LEN-7484 Potential Impact: Local privilege escalation or denial of service Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-5647 Summary Description: Multiple potential vulnerabilities exist in the Intel® Graphics Driver for Microsoft Windows. These...
Intel Ethernet Adapters 800 Series Advisory - Lenovo Support US
No description provided...
Intel SSD Advisory - Lenovo Support US
No description provided...
Intel Thunderbolt Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-31390 Potential Impact: Information disclosure, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14630 Summary Description: Intel reported potential security vulnerabilities, requiring physical access and dedicated equipment...
Intel Ready Mode Technology Discontinuation - US
Lenovo Security Advisory: LEN-25425 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3698 Summary Description: A potential security vulnerability in the Intel® Ready Mode Technology may allow for escalation of privilege. Intel is not...
Lazy FP State Restore - US
Lenovo Security Advisory: LEN-22880 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3665 Summary Description: Intel states that system software may utilize the Lazy FP state restore technique to delay the restoring of state until a...
Login information processed by the IMM2 may be exposed to local IMM2 users - us
Lenovo Security Advisory: LEN-14054 Potential Impact: Disclosure of login credentials to user with local privileges Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3744 Summary Description: A risk has been identified in the IMM2 firmware of Lenovo System x servers where...
Intel® Ethernet Controller X710/XL710 NVM Denial of Service Vulnerability - us
Lenovo Security Advisory: LEN-12029 Potential Impact: Denial of service to the Ethernet controller Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8106 Summary Description: A security vulnerability in the Intel® Ethernet Controller X710 and Intel® Ethernet Controller XL710...
Lenovo Accelerator Application Insecure Update Mechanism
Lenovo Security Advisory: LEN-6718 Potential Impact: Remote code execution by an attacker with local network access Severity: High Scope of Impact: Lenovo products described below Summary Description: A vulnerability was identified in the Lenovo Accelerator Application software which could lead t...
Brocade Fabric OS Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30367 Potential Impact: Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-16204 Summary Description: Brocade has released software security updates for Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d...
Multi-vendor BIOS Security Vulnerabilities - Lenovo Support US
No description provided...
USB Enhanced Performance Keyboard
Lenovo Security Advisory: LEN-2015-015 Potential Impact: Escalation of Privilege Severity: Low Summary: Lenovo’s “USB Enhanced Performance Keyboard” software has a known issue where debug code was accidently left in the application. The debug code includes information about which keys on the...
NVIDIA GeForce Experience - April 2021 Security Bulletin - Lenovo Support US
No description provided...
Intel RAPL Interface Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-41208 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8694, CVE-2020-8695 Summary Description: Intel reported potential security vulnerabilities in the Intel® Running Average Power Limit RAPL Interface...
Intel AMT Clickjacking Vulnerability - us
Lenovo Security Advisory: LEN-14005 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5697 Summary Description: Insufficient clickjacking protection in the Web User Interface of Intel® AMT firmware versions before 9.1.40.100,...
Intel RAPL Interface Advisory - Lenovo Support US
No description provided...
NVIDIA GPU Display Driver Update - Lenovo Support US
No description provided...