1206 matches found
Brocade Fibre Channel SAN Privilege Escalation - us
Lenovo Security Advisory: LEN-14794 Potential Impact: Local privilege escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8202 Summary Description: A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS FOS releases earli...
ThinkPad USB-C Dock Vulnerability - US
Lenovo Security Advisory: LEN-27886 Potential Impact: Denial of Service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6176 Summary Description: A potential vulnerability reported in ThinkPad USB-C Dock 40A9 Firmware version 3.7.2 may allow a denial of service. ...
Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-29482 Potential Impact: Information Disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14565, CVE-2019-14566 Summary Description: Intel reported a potential security vulnerability in certain libraries provided in the Intel SGX SDK may...
NVIDIA GPU Display Driver Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-29419 Potential Impact: Denial of service, escalation of privileges, code execution, information disclosure. Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5688,CVE-2019-5689, CVE-2019-5690, CVE-2019-5691, CVE-2019-5692, CVE-2019-5693,...
Lenovo Service Bridge Contains Privilege Escalation and Other Vulnerabilities - us
Lenovo Security Advisory: LEN-10149 Potential Impact: Local privilege escalation, cross-site request forgery, insecure connection, possibility to insert a forged code signing certificate Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8228, CVE-2016-8229, CVE-2016-8230,...
Intel® Wireless Bluetooth® Driver Unquoted Service Path - us
Lenovo Security Advisory: LEN-11158 Potential Impact: Denial of service Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8102 Summary Description: A denial of service vulnerability exists in the Intel® Wireless Bluetooth® Driver for Microsoft Windows. These drivers are...
Cloud Networking Operating System (CNOS) Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-44423 Potential Impact: Remote code execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8349 Summary Description: An internal security review has identified an unauthenticated remote code execution vulnerability in CNOS’ optional REST A...
Intel Wireless Bluetooth Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30557 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14620 Summary Description: Intel reported potential security vulnerabilities in Intel Bluetooth Software that may allow denial of service. Mitigation...
Industry-wide OSPF routing vulnerability on Lenovo and IBM Networking Switches - us
Lenovo Security Advisory: LEN-14078 Potential Impact: Erasure or alteration of routing tables within a routing domain Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3752 Summary Description: An industry-wide vulnerability has been identified in the implementation of the...
Lenovo Ultraslim Wireless Keyboard Keystroke Injection - lu
Lenovo Security Advisory: LEN-7267 Potential Impact: Potential unwanted data input Severity: Medium Scope of Impact: Industry-Wide Summary Description: A vulnerability was identified where an attacker with specialized equipment who is within close physical proximity to a system with the dongle fo...
Lenovo Fingerprint Manager
Lenovo Security Advisory: LEN-2015-017 Potential Impact: Privilege Escalation Severity: Medium Summary: Lenovo Fingerprint Manger has a local privilege escalation vulnerability. This vulnerability cannot be remotely exploited. A local user logged in to the PC could escalate their privileges by...
Intel® Storage NVMe and Rapid Storage Technology (RSTe) - US
Lenovo Security Advisory: LEN-24798 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-12131 Summary Description: A potential security vulnerability in the Intel® Storage NVMe and Rapid Storage Technology RSTe driver packs may allow...
Lenovo XClarity Administrator Credential Disclosure - us
Lenovo Security Advisory: LEN-13671 Potential Impact: Disclosure of credentials to a non-administrative user Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3745 Summary Description: During an internal assessment, a vulnerability was identified in Lenovo XClarity...
Lenovo Edge USB Keyboard Driver Local Privilege Escalation - us
Lenovo Security Advisory: LEN-11588 Potential Impact: Escalation of privileges by a local user Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8225 Summary Description: A vulnerability was identified in the Lenovo Edge USB Keyboard driver for Windows 7, 8 and 10 where a...
Microsoft Device Guard protection bypass - us
Lenovo Security Advisory: LEN-8327 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8222 Summary Description: A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacke...
Lenovo System Interface Foundation Vulnerabilities - US
Lenovo Security Advisory: LEN-29198 Potential Impact: Lateral Arbitrary Code Execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6186, CVE-2019-6189 Summary Description: Potential vulnerabilities were reported in Lenovo System Interface Foundation versions before...
ThinkServer *50-series BIOS Password Encryption Weakness
Lenovo Security Advisory: LEN-2015-018 Potential Impact: Password Disclosure Severity: Low Summary: The ThinkServer 50-series of servers store user and administrator BIOS passwords using a legacy, proprietary form of encryption. This issue was found during an internal security review and correcte...
AMD Radeon Driver Vulnerability - Lenovo Support US
No description provided...
AMD Radeon Driver Vulnerability - Lenovo Support US
No description provided...
Sierra Wireless Mobile Broadband Software Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30417 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-8948 Summary Description: Sierra Wireless reported a potential security vulnerability in Sierra Wireless Mobile Broadband Software that may allow...
Lenovo Bootable Generator Vulnerability - Lenovo Support US
No description provided...
Intel BIOS Advisory - Lenovo Support US
No description provided...
Intel PROSet Wireless WiFi Software Advisory - Lenovo Support US
Lenovo Security Advisory: LEN-36230 Potential Impact: Escalation of privilege or denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0559 Summary Description: Intel reported potential security vulnerabilities in Intel PROSet/Wireless WiFi Software that may all...
Synaptics Audio Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30707 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8337 Summary Description: An unquoted search path vulnerability was reported in Synaptics Audio Driver that could allow an administrative user to...
Lenovo XClarity Administrator (LXCA) Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-29942 Potential Impact: Information disclosure Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-19756 Summary Description: An internal product security audit of Lenovo XClarity Administrator LXCA discovered Windows OS credentials, used to...
SHAREit for Android Vulnerabilities - Lenovo Support US
No description provided...
GRUB2 Vulnerability – AKA
No description provided...
NVIDIA GeForce Experience Update - Lenovo Support US
Lenovo Security Advisory: LEN-27096 Potential Impact: Privilege escalation, code execution, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2019‑5674 Summary Description: NVIDIA has released a software security update for NVIDIA GeForce Experience. This update...
IMM2 FFDC includes Private Key - US
Lenovo Security Advisory: LEN-25667 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6157 Summary Description: In Lenovo System x, the integrated management module II IMM2's first failure data capture FFDC includes the web server'...
Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - us
Lenovo Security Advisory: LEN-14390 Potential Impact: Privilege Escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3757 Summary Description: An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad used on some Lenovo brand...
Lenovo Connect2 Ad-hoc Wifi Network Key Stored in User-readable Location - us
Lenovo Security Advisory: LEN-14398 Potential Impact: Disclosure of ad-hoc wifi network key stored in user-readable location Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3742 Summary Description: An internal assessment has identified a vulnerability in Lenovo Connect...
ALPS ALPINE Touchpad Driver Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-31334 Potential Impact: Escalation of privilege Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-15596 Summary Description: ALPS ALPINE reported a DLL search path vulnerability in the ALPS ALPINE Touchpad driver that could allow privilege...
FPT Software For Texas Instruments TPS65988 USB Type-C Power Delivery Controller Driver Vulnerabilities - US
Lenovo Security Advisory: LEN-27687 Potential Impact: Denial of Service; Escalation of Privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: N/A Summary Description: FPT Software has released an update for the Texas Instruments TPS65988 USB Type-C Power Delivery Controller Drive...
Lenovo XClarity Controller (XCC) Stored CSV Injection - US
Lenovo Security Advisory: LEN-29118 Potential Impact: Arbitrary Code Execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6187 Summary Description: A stored CSV Injection vulnerability was reported in Lenovo XClarity Controller XCC that could allow an administrativ...
Bluetooth “BlueBorne” Vulnerabilities - Lenovo Support US
No description provided...
Bluetooth Pairing Key Validation - Lenovo Support US
No description provided...
Intel® PROSet/Wireless Software Denial of Service - us
Lenovo Security Advisory: LEN-14246 Potential Impact: Denial of service Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8104 Summary Description: A buffer overflow security vulnerability has been identified in the Intel® PROSet/Wireless Software and Drivers before version...
Intel SSD Advisory - Lenovo Support US
No description provided...
NetApp: FAS 8300/8700 & AFF A400 BMC Security Advisory - US
Lenovo Security Advisory: LEN-30687 Potential Impact: Unauthorized arbitrary command execution Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-17274 Summary Description: NetApp reported a vulnerability in FAS 8300/8700 and AFF A400 Baseboard Management Controller BMC firmwa...
NVIDIA GeForce Experience Update - Lenovo Support US
Lenovo Security Advisory: LEN-30236 Potential Impact: Denial of Service or Escalation of Privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE‑2019‑5702 Summary Description: NVIDIA has released a software security update for NVIDIA GeForce Experience. This update addresses a...
Missing HTTP Security Headers in NetApp OnCommand Workflow Automation - US
Lenovo Security Advisory: LEN-29480 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2019-5503 Summary Description: NetApp reported that OnCommand Workflow Automation versions prior to 5.0 shipped without certain HTTP Security headers...
NVIDIA GPU Display Driver Update - Lenovo Support US
No description provided...
Lenovo Bootable Generator Vulnerability - US
Lenovo Security Advisory: LEN-25401 Potential Impact: Code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6154 Summary Description: A DLL search path vulnerability was reported in Lenovo Bootable Generator that could allow a malicious user with local access t...
BIOS Write Protection Race Condition - Lenovo Support US
No description provided...
ThinkPad USB 3.0 Ethernet Adapter Driver Privilege Escalation - us
Lenovo Security Advisory: LEN-9896 Potential Impact: Privilege escalation and executable files without a valid signature Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3746 Summary Description: During an internal analysis, the ThinkPad USB 3.0 Ethernet Adapter part numbe...
Denial of service attack on Lenovo System X M5, M6, and X6 systems - us
Lenovo Security Advisory: LEN-11306 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8226 Summary Description: A vulnerability was identified in the BIOS of Lenovo System X M5, M6, and X6 systems. An attacker with administrative access...
Intel Optane DC Persistent Memory Module Management Software - Lenovo Support US
Lenovo Security Advisory: LEN-30556 Potential Impact: Escalation of privilege Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2020-0546 Summary Description: Intel reported potential security vulnerabilities in Intel Optane DC Persistent Memory Module Management Software which...
Intel CSME Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-30525 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-14598 Summary Description: Intel reported a potential security vulnerability in CSME subsystem may allow...
Intel PROSet/Wireless WiFi Software Vulnerability - Lenovo Support US
No description provided...
Synaptics Touchpad Driver Leaks Kernel Memory Pointers - US
Lenovo Security Advisory: LEN-23156 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-15532 Summary Description: Synaptics has informed Lenovo of a vulnerability in the Synaptics TouchPad driver. The driver can reveal freed kernel memo...