1208 matches found
System x Secure Boot Vulnerability - Lenovo Support US
No description provided...
System x Secure Boot Vulnerability - US
Lenovo Security Advisory: LEN-20241 Potential Impact: Booting unauthenticated code Severity: High Scope of Impact: Lenovo-only CVE Identifier: CVE-2017-3775 Summary Description: Lenovo internal testing discovered some System x server BIOS/UEFI versions that, when Secure Boot mode is enabled by a...
Synaptics Pointing Device Driver Vulnerability - Lenovo Support US
No description provided...
Synaptics Pointing Device Driver Vulnerability - Lenovo Support US
Lenovo Security Advisory: LEN-24573 Potential Impact: Code execution Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-16098 Summary Description: A researcher reported to Lenovo an unquoted search path vulnerability was found in Synaptics Pointing Device drivers of some...
Intel® Storage NVMe and Rapid Storage Technology (RSTe) - US
Lenovo Security Advisory: LEN-24798 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-12131 Summary Description: A potential security vulnerability in the Intel® Storage NVMe and Rapid Storage Technology RSTe driver packs may allow...
Intel® Storage NVMe and Rapid Storage Technology (RSTe) - Lenovo Support US
No description provided...
Firmware Authentication Bypass - US
Lenovo Security Advisory: LEN-23849 Potential Impact: Escalation of privilege Severity: High Scope of Impact: Industry-wide CVE Identifier: No CVE Summary Description: Intel has reported a potential security vulnerability allowing an attacker with physical access to bypass firmware authentication...
Firmware Authentication Bypass - Lenovo Support US
No description provided...
WPA2 Protocol Vulnerabilities - US
Lenovo Security Advisory: LEN-17420 Potential Impact: An attacker could manipulate the vulnerability to affect clients through arbitrary packet decryption and injection, TCP connection hijacking, HTTP content injection, or the replay of unicast and group-addressed frames Severity: High Scope of...
WPA2 Protocol Vulnerabilities - Lenovo Support US
No description provided...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
No description provided...
NVIDIA GeForce Experience Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-24779 Potential Impact: Information disclosure, denial of service, privilege escalation Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-6257, CVE-2018-6258, CVE-2018-6259, CVE‑2018‑6261, CVE‑2018‑6262 Summary Description: NVIDIA has released a...
Lazy FP State Restore - Lenovo Support US
No description provided...
Lazy FP State Restore - US
Lenovo Security Advisory: LEN-22880 Potential Impact: Information Disclosure Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3665 Summary Description: Intel states that system software may utilize the Lazy FP state restore technique to delay the restoring of state until a...
Lenovo XClarity Integrator Vulnerabilities - US
Lenovo Security Advisory: LEN-23800 Potential Impact: Privilege escalation, information disclosure, file system modification Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9072, CVE-2018-16093, CVE-2018-16097 Summary Description: In a recent internal audit, Lenovo...
Lenovo XClarity Integrator Vulnerabilities - Lenovo Support US
No description provided...
Brocade Fabric OS Advisory - Lenovo Support US
No description provided...
Brocade Fabric OS Advisory - US
Lenovo Security Advisory: LEN-24765 Potential Impact: Privilege escalation, information disclosure, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-6433, CVE-2018-6434, CVE-2018-6435, CVE-2018-6436, CVE-2018-6437, CVE-2018-6438, CVE-2018-6439, CVE-2018-644...
Intel DCI Policy Update - US
Lenovo Security Advisory: LEN-23611 Potential Impact: Privilege escalation, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3652 Summary Description: Intel is releasing Direct Connect Interface DCI policy update. Existing UEFI setting restrictions for...
Intel DCI Policy Update - Lenovo Support US
No description provided...
AMI BIOS System Management Mode Vulnerability - US
Lenovo Security Advisory: LEN-24238 Potential Impact: Information disclosure, code execution Severity: Medium Scope of Impact: Industry-wide Summary Description: AMI has reported to Lenovo that the System Management Mode SMM module was not properly validating buffers in the BIOS supplied by AMI...
AMI BIOS System Management Mode Vulnerability - Lenovo Support US
No description provided...
Intel RST Installer Vulnerability - Lenovo Support US
No description provided...
Intel RST Installer Vulnerability - US
Lenovo Security Advisory: LEN-25086 Potential Impact: Privilege escalation, denial of service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-3635 Summary Description: A potential security vulnerability in Intel® Rapid Store Technology RST installer may allow an unprivilege...
Multiple potential vulnerabilities in User Mode driver components of Intel Graphics Driver Unified Shader Compiler - Lenovo Support US
No description provided...
Multiple potential vulnerabilities in User Mode driver components of Intel Graphics Driver Unified Shader Compiler - US
Lenovo Security Advisory: LEN-24426 Potential Impact: Elevation of Privilege, Denial of Service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2018-12152, CVE-2018-12153, CVE-2018-12154 Summary Description: The Intel® Graphics Drivers for Windows version 15.40.4963 and 15.36.48...
Legacy Server BMC Remote Command Injection - Lenovo Support US
No description provided...
Legacy Server BMC Remote Command Injection - US
Lenovo Security Advisory: LEN-23836 Potential Impact: Arbitrary Code Execution Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9086 Summary Description: Lenovo has become aware that in certain legacy Lenovo ThinkServer-branded servers, a command injection vulnerability...
Insecure Handling of UEFI Variables - US
Lenovo Security Advisory: LEN-23850 Potential Impact: Elevation of Privilege, Denial of service Severity: Medium Scope of Impact: Industry-wide Summary Description: Intel has reported to Lenovo that the BIOS reference code supplied for certain CPUs may permit an attacker to alter certain UEFI...
Insecure Handling of UEFI Variables - Lenovo Support US
No description provided...
CMM Security Concerns - US
Lenovo Security Advisory: LEN-23806 Potential Impact: Information Disclosure; Hardcoded Encryption Key Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9071, CVE-2018-9073 Summary: In a recent internal audit, Lenovo identified potential security vulnerabilities in the...
CMM Security Concerns - Lenovo Support US
No description provided...
Intel Graphics Drivers Vulnerabilities - US
Lenovo Security Advisory: LEN-15570 Potential Impact: Privilege escalation, modification of kernel memory Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5696, CVE-2017-5727, CVE-2017-5717, CVE-2017-5692 Summary Description: Intel has issued multiple advisories related to i...
Intel Graphics Drivers Vulnerabilities - Lenovo Support US
No description provided...
Missing System x Flash Memory Write Protection Lock Bit - Lenovo Support US
No description provided...
Missing System x Flash Memory Write Protection Lock Bit - US
Lenovo Security Advisory: LEN-24477 Potential Impact: Denial of service Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9085 Summary Description: A write protection lock bit was left unset after boot on an older generation of System x server, potentially allowing an...
Synaptics Touchpad Driver Leaks Kernel Memory Pointers - Lenovo Support US
No description provided...
Synaptics Touchpad Driver Leaks Kernel Memory Pointers - US
Lenovo Security Advisory: LEN-23156 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2018-15532 Summary Description: Synaptics has informed Lenovo of a vulnerability in the Synaptics TouchPad driver. The driver can reveal freed kernel memo...
AMI Firmware Permits Microcode Downgrade - Lenovo Support US
No description provided...
AMI Firmware Permits Microcode Downgrade - US
Lenovo Security Advisory: LEN-24239 Potential Impact: Unauthorized microcode downgrade Severity: Medium Scope of Impact: Industry-wide Summary Description: AMI has reported to Lenovo that the BIOS supplied by AMI may allow an attacker to revert the CPU firmware to an older version. Mitigation...
Intel® PROSet/Wireless WiFi Software Vulnerabilities - US
Lenovo Security Advisory: LEN-24443 Potential Impact: Elevation of Privilege, Denial of Service, Information Disclosure Severity: High Scope of Impact: Systems with specific versions of Intel® PROSet/Wireless WiFi Software CVE Identifier: CVE-2006-7250, CVE-2007-3108, CVE-2007-4995, CVE-2007-5135...
Intel® PROSet/Wireless WiFi Software Vulnerabilities - Lenovo Support US
No description provided...
Lenovo Smart Assistant Factory Test Mode - Lenovo Support US
No description provided...
Reading Privileged Memory with a Side Channel - Lenovo Support US
No description provided...
Reading Privileged Memory with a Side Channel - US
Lenovo Security Advisory: LEN-18282 Potential Impact: Malicious code running locally may be able to observe contents of privileged memory, circumventing expected privilege levels. Severity: High Scope of Impact: Industry-wide CVE Identifier: “Spectre” CVE-2017-5753, CVE-2017-5715 “Meltdown”...
System Management Module Vulnerabilities - Lenovo Support US
No description provided...
System Management Module Vulnerabilities - US
Lenovo Security Advisory: LEN-24374 Potential Impact: Privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2018-9083, CVE-2018-9084, CVE-2018-16089, CVE-2018-16090, CVE-2018-16091, CVE-2018-16092, CVE-2018-16094, CVE-2018-16095, CVE-2018-16096 Summary...
Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US
No description provided...