1206 matches found
QEMU i8254 PIT Emulation Bug
Lenovo Security Advisory: LEN-2015-075 Potential Impact: Escalation of Privileges Severity: High Summary: A vulnerability was reported in QEMU where a local user on the guest system could potentially obtain elevated privileges on the target host system. This vulnerability was reported to Red Hat...
Lenovo XClarity Integrator Vulnerabilities - US
Lenovo Security Advisory: LEN-23800 Potential Impact: Privilege escalation, information disclosure, file system modification Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9072, CVE-2018-16093, CVE-2018-16097 Summary Description: In a recent internal audit, Lenovo...
Dolby DAX2 API Vulnerability - Lenovo Support US
No description provided...
Lenovo XClarity Administrator (LXCA) Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-29477 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6193, CVE-2019-6194, CVE-2019-19757 Summary Description: CVE-2019-6193: An information disclosure vulnerability was reported in...
Intel Ethernet 700 Series Controller Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-27715 Potential Impact: Escalation of Privilege, Denial of Service, Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0139, CVE-2019-0140, CVE-2019-0142, CVE-2019-0143, CVE-2019-0145, CVE-2019-0146, CVE-2019-0147,...
Sierra Wireless WAN Driver Privilege Escalation - us
Lenovo Security Advisory: LEN-12739 Potential Impact: Local Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-9247 Summary Description: A vulnerability was identified in the Sierra Wireless WAN driver for Windows 7, 8 and 10 where a user with local...
Venom - Lenovo Support US
No description provided...
NVIDIA GPU Display Driver Update - Lenovo Support US
No description provided...
Intel Graphics Driver for Windows - Lenovo Support US
No description provided...
Intel Rapid Storage Technology (RST) Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29840 Potential Impact: Escalation of Privilege Scope of Impact: Industry-wide Severity: Medium CVE Identifier: CVE-2019-14568 Summary Description: Intel reported a potential security vulnerability in the Intel Rapid Storage Technology RST which may allow escalation ...
LXCA and LXCI Insufficient Input Validation - US
Lenovo Security Advisory: LEN-27805 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6179, CVE-2019-6180, CVE-2019-6181, CVE-2019-6182 Summary Description: Vulnerabilities reported in Lenovo XClarity Administrator...
Dynamic Power Reduction Utility Vulnerability - US
Lenovo Security Advisory: LEN-25674 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6149 Summary Description: An unquoted search path vulnerability was identified in Dynamic Power Reduction Utility, affecting ThinkPad X1 Carbon...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-25444 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2018‑6263, CVE‑2018‑6265, CVE‑2018‑6266 Summary Description: NVIDIA has released a software update for GeForce Experience. This upda...
Locked Data on Intel 5400s and 6000p Solid State Drives Could be Corrupted by Malware - us
Lenovo Security Advisory: LEN-15217 Potential Impact: Drive data could be corrupted by malware even when locked Severity: Medium Scope of Impact: Industry wide Summary Description: A vulnerability has been reported by Intel, a manufacturer of Solid State Drives SSDs, with the Intel models 5400s a...
Credential disclosure in LXCA log files - us
Lenovo Security Advisory: LEN-11635 Potential Impact: Disclosure of credentials to a non-privileged user Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8233 Summary Description: During an internal security review, log files generated by Lenovo XClarity Administrator LXCA...
Temporary Lenovo XClarity Administrator (LXCA) credentials may be exposed - us
Lenovo Security Advisory: LEN-10605 Potential Impact: Disclosure of temporary software-defined administrator credentials for LXCA by a non-privileged user Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8221 Summary Description: During an internal security review, Lenovo...
Row Hammer Privilege Escalation
Lenovo Security Advisory: LEN-2015-009 Potential Impact: Escalation of Privilege Severity: Medium Summary: The Passgate issue aka “Row Hammer” is an inherent design/process limitation in memory for sub 40nm technology such as DDR3/DDR3L/LPDDR2/LPDDR3/GDDR5 that can cause errors in rows of memory...
System Management Mode (SMM) BIOS Vulnerability in some legacy System x servers - Lenovo Support US
Lenovo Security Advisory: LEN-38625 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8332 Summary Description: A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and...
Intel AMT and Intel ISM Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-41856 Potential Impact: Privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8758 Summary Description: Intel reported potential security vulnerabilities in Intel Active Management Technology AMT and Intel Standard Manageability...
Intel Unite Client Vulnerability - US
Lenovo Security Advisory: LEN-27709 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0132 Summary Description: A potential security vulnerability in Intel Unite Client may allow denial of service. Mitigation Strategy for Customers what y...
Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US
No description provided...
Vulnerability in Service Assistance GUI for Lenovo Storage and Storwize Products - lu
Lenovo Security Advisory: LEN-18236 Potential Impact: A vulnerability in the Service Assistant GUI could allow a remote attacker to perform a privilege escalation. Severity: High Scope of Impact: Lenovo Storage/IBM Storwize CVE Identifier: CVE-2017-1710 Summary Description: A vulnerability in the...
Lenovo XClarity Controller (XCC) Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-29116 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6195 Summary Description: An authorization bypass exists in Lenovo XClarity Controller XCC where a valid authenticated user with lesser privileges...
Unquoted Service Path Privilege Escalation in ThinkPad Active Protection System - us
Lenovo Security Advisory: LEN-15765 Potential Impact: Privilege Escalation Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3756 Summary Description: A privilege escalation vulnerability was identified in Lenovo Active Protection System for ThinkPad systems. An attacker wi...
Login information processed by the IMM2 may be exposed to local IMM2 users - us
Lenovo Security Advisory: LEN-14054 Potential Impact: Disclosure of login credentials to user with local privileges Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3744 Summary Description: A risk has been identified in the IMM2 firmware of Lenovo System x servers where...
SMM "Incursion" Attack
Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...
LXCA User Account Names Exposed To Unauthenticated Users Who Can Access the Web User Interface - lu
Lenovo Security Advisory: LEN-16335 Potential Impact: LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3764 Summary Description: A vulnerability was identified in...
Intel Ethernet Adapters 800 Series Advisory - Lenovo Support US
No description provided...
Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US
No description provided...
Intel SSD Advisory - Lenovo Support US
No description provided...
Lazy FP State Restore - US
Lenovo Security Advisory: LEN-22880 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3665 Summary Description: Intel states that system software may utilize the Lazy FP state restore technique to delay the restoring of state until a...
Some Lenovo Brand Notebooks Do Not Have BIOS Write Protection Configured - us
Lenovo Security Advisory: LEN-15084 Potential Impact: Attacker with physical or administrative access could flash malicious BIOS code Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3754 Summary Description: Some Lenovo brand notebook systems do not have write protections...
Local Privilege Escalation or Denial of Service via the Intel® Graphics Driver
Lenovo Security Advisory: LEN-7484 Potential Impact: Local privilege escalation or denial of service Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-5647 Summary Description: Multiple potential vulnerabilities exist in the Intel® Graphics Driver for Microsoft Windows. These...
Lenovo Accelerator Application Insecure Update Mechanism
Lenovo Security Advisory: LEN-6718 Potential Impact: Remote code execution by an attacker with local network access Severity: High Scope of Impact: Lenovo products described below Summary Description: A vulnerability was identified in the Lenovo Accelerator Application software which could lead t...
Intel Ready Mode Technology Discontinuation - US
Lenovo Security Advisory: LEN-25425 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3698 Summary Description: A potential security vulnerability in the Intel® Ready Mode Technology may allow for escalation of privilege. Intel is not...
Multi-vendor BIOS Security Vulnerabilities - Lenovo Support US
No description provided...
WPA2 Protocol Vulnerabilities - Lenovo Support US
No description provided...
Intel AMT Clickjacking Vulnerability - us
Lenovo Security Advisory: LEN-14005 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5697 Summary Description: Insufficient clickjacking protection in the Web User Interface of Intel® AMT firmware versions before 9.1.40.100,...
USB Enhanced Performance Keyboard
Lenovo Security Advisory: LEN-2015-015 Potential Impact: Escalation of Privilege Severity: Low Summary: Lenovo’s “USB Enhanced Performance Keyboard” software has a known issue where debug code was accidently left in the application. The debug code includes information about which keys on the...
Intel Thunderbolt Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-31390 Potential Impact: Information disclosure, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14630 Summary Description: Intel reported potential security vulnerabilities, requiring physical access and dedicated equipment...
Intel® Ethernet Controller X710/XL710 NVM Denial of Service Vulnerability - us
Lenovo Security Advisory: LEN-12029 Potential Impact: Denial of service to the Ethernet controller Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8106 Summary Description: A security vulnerability in the Intel® Ethernet Controller X710 and Intel® Ethernet Controller XL710...
Intel RAPL Interface Advisory - Lenovo Support US
No description provided...
Brocade Fabric OS Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30367 Potential Impact: Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-16204 Summary Description: Brocade has released software security updates for Brocade Fabric OS Versions before v7.4.2f, v8.2.2a, v8.1.2j and v8.2.1d...
Lenovo Fingerprint Manager and Lenovo Touch Fingerprint Software Privilege Escalation
Mitigation Strategy for Customers what you should do to protect yourself: There are several ways you can protect yourself. Lenovo recommends that you take one of the following steps: • Starting from March 18, 2016, run Lenovo System Update and install the recommended Fingerprint Manager or Lenovo...
Intel CSME, SPS, and LMS Advisory - Lenovo Support US
No description provided...
Intel RAPL Interface Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-41208 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8694, CVE-2020-8695 Summary Description: Intel reported potential security vulnerabilities in the Intel® Running Average Power Limit RAPL Interface...
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
No description provided...
NVIDIA GeForce Experience - April 2021 Security Bulletin - Lenovo Support US
No description provided...
AMD Radeon Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-48973 Potential Impact: Denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-12933 Summary Description: AMD reported a potential vulnerability in AMD Radeon graphics drivers that could result in denial of service. Mitigation Strate...
Lenovo Solution Center Vulnerability - US
Lenovo Security Advisory: LEN-27811 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6177 Summary Description: A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files t...