1176 matches found
Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-36230 Potential Impact: Escalation of privilege or denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0559 Summary Description: Intel reported potential security vulnerabilities in Intel PROSet/Wireless WiFi Software that may all...
Intel Wireless Bluetooth Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30557 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14620 Summary Description: Intel reported potential security vulnerabilities in Intel Bluetooth Software that may allow denial of service. Mitigation...
Synaptics Audio Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30707 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8337 Summary Description: An unquoted search path vulnerability was reported in Synaptics Audio Driver that could allow an administrative user to...
NVIDIA GPU Display Driver Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-29419 Potential Impact: Denial of service, escalation of privileges, code execution, information disclosure. Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5688,CVE-2019-5689, CVE-2019-5690, CVE-2019-5691, CVE-2019-5692, CVE-2019-5693,...
Lenovo XClarity Administrator Credential Disclosure - us
Lenovo Security Advisory: LEN-13671 Potential Impact: Disclosure of credentials to a non-administrative user Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3745 Summary Description: During an internal assessment, a vulnerability was identified in Lenovo XClarity...
Intel® Wireless Bluetooth® Driver Unquoted Service Path - us
Lenovo Security Advisory: LEN-11158 Potential Impact: Denial of service Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8102 Summary Description: A denial of service vulnerability exists in the Intel® Wireless Bluetooth® Driver for Microsoft Windows. These drivers are...
Microsoft Device Guard protection bypass - us
Lenovo Security Advisory: LEN-8327 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8222 Summary Description: A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacke...
Sierra Wireless Mobile Broadband Software Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30417 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8948 Summary Description: Sierra Wireless reported a potential security vulnerability in Sierra Wireless Mobile Broadband Software that may allow...
Lenovo System Interface Foundation Vulnerabilities - US
Lenovo Security Advisory: LEN-29198 Potential Impact: Lateral Arbitrary Code Execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6186, CVE-2019-6189 Summary Description: Potential vulnerabilities were reported in Lenovo System Interface Foundation versions before...
FPT Software For Texas Instruments TPS65988 USB Type-C Power Delivery Controller Driver Vulnerabilities - US
Lenovo Security Advisory: LEN-27687 Potential Impact: Denial of Service; Escalation of Privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: N/A Summary Description: FPT Software has released an update for the Texas Instruments TPS65988 USB Type-C Power Delivery Controller Drive...
Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - us
Lenovo Security Advisory: LEN-14390 Potential Impact: Privilege Escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3757 Summary Description: An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad used on some Lenovo brand...
ThinkServer *50-series BIOS Password Encryption Weakness
Lenovo Security Advisory: LEN-2015-018 Potential Impact: Password Disclosure Severity: Low Summary: The ThinkServer 50-series of servers store user and administrator BIOS passwords using a legacy, proprietary form of encryption. This issue was found during an internal security review and correcte...
AMD Radeon Driver Vulnerability - Lenovo Support US
No description provided...
Lenovo XClarity Administrator (LXCA) Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-29942 Potential Impact: Information disclosure Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-19756 Summary Description: An internal product security audit of Lenovo XClarity Administrator LXCA discovered Windows OS credentials, used to...
Lenovo XClarity Controller (XCC) Stored CSV Injection - US
Lenovo Security Advisory: LEN-29118 Potential Impact: Arbitrary Code Execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6187 Summary Description: A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller XCC that could allow an administrativ...
IMM2 FFDC includes Private Key - US
Lenovo Security Advisory: LEN-25667 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6157 Summary Description: In Lenovo System x, the integrated management module II IMM2's first failure data capture FFDC includes the web server'...
ALPS ALPINE Touchpad Driver Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-31334 Potential Impact: Escalation of privilege Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-15596 Summary Description: ALPS ALPINE reported a DLL search path vulnerability in the ALPS ALPINE Touchpad driver that could allow privilege...
Intel Special Register Buffer Data Sampling Advisory - Lenovo Support US
No description provided...
NetApp: FAS 8300/8700 & AFF A400 BMC Security Advisory - US
Lenovo Security Advisory: LEN-30687 Potential Impact: Unauthorized arbitrary command execution Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-17274 Summary Description: NetApp reported a vulnerability in FAS 8300/8700 and AFF A400 Baseboard Management Controller BMC firmwa...
NVIDIA GeForce Experience Update - Lenovo Support US
Lenovo Security Advisory: LEN-27096 Potential Impact: Privilege escalation, code execution, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2019‑5674 Summary Description: NVIDIA has released a software security update for NVIDIA GeForce Experience. This update...
ThinkPad USB 3.0 Ethernet Adapter Driver Privilege Escalation - us
Lenovo Security Advisory: LEN-9896 Potential Impact: Privilege escalation and executable files without a valid signature Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3746 Summary Description: During an internal analysis, the ThinkPad USB 3.0 Ethernet Adapter part numbe...
Intel® PROSet/Wireless Software Denial of Service - us
Lenovo Security Advisory: LEN-14246 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8104 Summary Description: A buffer overflow security vulnerability has been identified in the Intel® PROSet/Wireless Software and Drivers before version...
Lenovo Connect2 Ad-hoc Wifi Network Key Stored in User-readable Location - us
Lenovo Security Advisory: LEN-14398 Potential Impact: Disclosure of ad-hoc wifi network key stored in user-readable location Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3742 Summary Description: An internal assessment has identified a vulnerability in Lenovo Connect...
GRUB2 Vulnerability – AKA
Lenovo Security Advisory: LEN-34794 Potential Impact: Escalation of privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-10713 Summary Description: Lenovo is aware of a vulnerability in GRUB2, an open source bootloader commonly used by Linux, that could allow Secure Bo...
Bluetooth “BlueBorne” Vulnerabilities - Lenovo Support US
No description provided...
L1 Terminal Fault Side Channel Vulnerabilities - Lenovo Support US
No description provided...
Intel CSME Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30525 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14598 Summary Description: Intel reported a potential security vulnerability in CSME subsystem may allow...
Missing HTTP Security Headers in NetApp OnCommand Workflow Automation - US
Lenovo Security Advisory: LEN-29480 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5503 Summary Description: NetApp reported that OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers...
Lenovo Bootable Generator Vulnerability - US
Lenovo Security Advisory: LEN-25401 Potential Impact: Code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6154 Summary Description: A DLL search path vulnerability was reported in Lenovo Bootable Generator that could allow a malicious user with local access t...
AMD Secure Encryption Virtualization (SEV) Information Disclosure - Lenovo Support US
No description provided...
Intel Optane DC Persistent Memory Module Management Software - Lenovo Support US
Lenovo Security Advisory: LEN-30556 Potential Impact: Escalation of privilege Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0546 Summary Description: Intel reported potential security vulnerabilities in Intel Optane DC Persistent Memory Module Management Software which...
BIOS Write Protection Race Condition - Lenovo Support US
No description provided...
Intel® PROSet and Killer™ Wireless WiFi Driver Advisory - Lenovo Support US
No description provided...
Intel Renesas Electronics® USB 3.0 Driver Discontinuation - Lenovo Support US
Lenovo Security Advisory: LEN-30522 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0560 Summary Description: Intel has issued a Product Discontinuation notice for Intel® Renesas Electronics® USB 3.0 Driver due to a potential securit...
NVIDIA GeForce Experience Update - Lenovo Support US
Lenovo Security Advisory: LEN-30236 Potential Impact: Denial of Service or Escalation of Privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2019‑5702 Summary Description: NVIDIA has released a software security update for NVIDIA GeForce Experience. This update addresses a...
RSA Keys Generated by Infineon TPMs are Insecure - Lenovo Support US
No description provided...
NVIDIA Windows Privilege Delegation Escalation
Lenovo Security Advisory: LEN-2015-008 Potential Impact: Escalation of Privilege Severity: Medium Summary: The NVIDIA Display Driver’s kernel administrator check improperly validates local client impersonation levels in some cases. Description: This vulnerability can only be exploited by a user...
Intel Special Register Buffer Data Sampling Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-30043 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0543 Summary Description: Intel reported potential security vulnerabilities in some Intel Processors that may allow information disclosure. This...
Synaptics Touchpad Driver Leaks Kernel Memory Pointers - US
Lenovo Security Advisory: LEN-23156 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-15532 Summary Description: Synaptics has informed Lenovo of a vulnerability in the Synaptics TouchPad driver. The driver can reveal freed kernel memo...
NVIDIA GPU Display Driver - January 2021 Security Bulletin - Lenovo Support US
No description provided...
Intel® Ethernet 700 Series Controller Advisory - Lenovo Support US
No description provided...
Intel SSD Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-30040 Potential Impact: Information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0527 Summary Description: Intel reported a potential security vulnerability in Intel Solid State Drive SSD products that may allow information...
Intel Chipset Device Software INF Utility Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-29926 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14596 Summary Description: Intel reported a potential security vulnerability in Intel Chipset Device Software INF Utility which may allow denial of...
Denial of service attack on Lenovo System X M5, M6, and X6 systems - us
Lenovo Security Advisory: LEN-11306 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8226 Summary Description: A vulnerability was identified in the BIOS of Lenovo System X M5, M6, and X6 systems. An attacker with administrative access...
AMD Radeon Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-48405 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-12911 Summary Description: AMD reported a potential vulnerability in AMD Radeon graphics drivers that could result in denial of service. Mitigation...
Intel Processor Graphics Vulnerability - Lenovo Support US
No description provided...
NetApp Clustered Data ONTAP 9.2 Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-29588 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5508 Summary Description: NetApp reported that Clustered Data ONTAP versions 9.2 through 9.4 are susceptible to a vulnerability which allows an attacker...
Privilege Escalation Vulnerability in Lenovo Transition Application - us
Lenovo Security Advisory: LEN-12508 Potential Impact: Local privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8227 Summary Description: A vulnerability was identified in the Lenovo Transition program specific to some Lenovo Yoga, Flex and Miix systems...
Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems - us
Lenovo Security Advisory: LEN-9903 Potential Impact: Denial of service or privilege escalation by an attacker with administrative access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8224 Summary Description: A vulnerability has been identified in some Lenovo Notebook a...
Unauthorized Modification of UEFI Variables in UEFI Systems
Lenovo Security Advisory: LEN-2014-002 Potential Impact: Modifications of UEFI variables Severity: Medium Summary: Certain firmware implementations may not correctly protect and validate information contained in certain UEFI variables. Exploitation of such vulnerabilities could potentially lead t...