1200 matches found
IMM2 Web Service Stack Overflow - NL
Lenovo Security Advisory: LEN-19586 Potential Impact: Stack overflow leading to memory corruption Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3774 Summary Description: A stack overflow vulnerability was discovered within the web administration service in the...
IMM2 Web Service Stack Overflow - Lenovo Support US
Lenovo Security Advisory: LEN-19586 Potential Impact: Stack overflow leading to memory corruption Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3774 Summary Description: A stack overflow vulnerability was discovered within the web administration service in the...
Lenovo Help Mobile App Transmits Information Over HTTP - Lenovo Support US
No description provided...
Lenovo Help Mobile App Transmits Information Over HTTP - US
Lenovo Security Advisory: LEN-20475 Potential Impact: Exposure of user-identifiable information Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3776 Summary Description: The Lenovo Help Android app assists users with support for Lenovo devices. This requires transmitting...
BIOS SMI Handler Input Validation Failures - Lenovo Support US
No description provided...
BIOS SMI Handler Input Validation Failures - US
Lenovo Security Advisory: LEN-14695 Potential Impact: Execution of code in System Management Mode by an attacker with local administrative access Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3753 Summary Description: A vulnerability has been identified in some Lenovo...
Intel SGX Update and Attestation Key Recovery - US
Lenovo Security Advisory: LEN-15184 Potential Impact: Elevation of Privilege / Information Disclosure Severity: High Scope of Impact: Industry Wide CVE Identifier: CVE-2017-5691 Summary Description: Intel has discovered a vulnerability that could impact the security of Intel® Software Guard...
Intel SGX Update and Attestation Key Recovery - Lenovo Support US
No description provided...
Brocade Fabric OS Vulnerabilities - US
Lenovo Security Advisory: LEN-18214 Potential Impact: Cross-site Scripting, Denial of Service Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-6225, CVE-2017-6227 Summary Description: Brocade issued advisories BSA-2018-525 and BSA-2018-526 related to vulnerabilities in Broca...
Brocade Fabric OS Vulnerabilities - Lenovo Support US
No description provided...
Synaptics Keyboard Driver Unprotected Debug Mode - us
Synaptics Keyboard Driver Unprotected Debug Mode Lenovo Security Advisory: LEN-18507 Potential Impact: Loss of confidentiality local to system Severity: Medium Scope of Impact: Industry-wide CVE Identifier: CVE-2017-17556 Summary Description: A researcher discovered a vulnerability in Synaptics...
Synaptics Keyboard Driver Unprotected Debug Mode - Lenovo Support US
No description provided...
NVIDIA GPU display driver contains multiple vulnerabilities in the kernel mode layer handler - us
Lenovo Security Advisory: LEN-15854 Potential Impact: Denial of Service or Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-6251, CVE-2017-6252, CVE-2017-6253, CVE-2017-6254, CVE-2017-6255, CVE-2017-6256, CVE-2017-6257, CVE-2017-6258, CVE-2017-6259,...
NVIDIA GPU display driver contains multiple vulnerabilities in the kernel mode layer handler - Lenovo Support US
No description provided...
NVIDIA GPU Display driver contains multiple vulnerabilities in the kernel mode layer handler - us
Lenovo Security Advisory: LEN-14587 Potential Impact: Denial of service or privilege escalation Severity: High Scope of Impact: Industry-Wide CVE Identifiers: CVE-2017-0341, CVE-2017-0342, CVE-2017-0343, CVE-2017-0344, CVE-2017-0345, CVE-2017-0346, CVE-2017-0347, CVE-2017-0348, CVE-2017-0349,...
NVIDIA GPU Display driver contains multiple vulnerabilities in the kernel mode layer handler - Lenovo Support US
No description provided...
Enterprise Networking Operating System (ENOS) Authentication Bypass in Lenovo and IBM RackSwitch and BladeCenter Products - Lenovo Support US
No description provided...
Enterprise Networking Operating System (ENOS) Authentication Bypass in Lenovo and IBM RackSwitch and BladeCenter Products - US
Lenovo Security Advisory: LEN-16095 Potential Impact: An attacker could gain access to the switch management interface, permitting settings changes that could result in exposing traffic passing through the switch, subtle malfunctions in the attached infrastructure, and partial or complete denial ...
Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Remote Privilege Escalation - us
Lenovo Security Advisory: LEN-14963 Potential Impact: Remote or local exploitation of manageability features leading to unprivileged system access Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-5689 Summary Description: Intel manageability SKUs AMT, ISM, and SBT have a...
Intel Active Management Technology, Intel Small Business Technology, and Intel Standard Manageability Remote Privilege Escalation - Lenovo Support US
No description provided...
USB provisioning may be allowed when Intel AMT is disabled - Lenovo Support US
No description provided...
USB provisioning may be allowed when Intel AMT is disabled
Lenovo Security Advisory: LEN-3556 Potential Impact: Unwanted local AMT provisioning of system Severity: Medium Summary: Some systems with Intel’s AMT technology which is installed on many PCs across vendors may be able to be provisioned by someone with physical access to the system via a special...
IMM2 Denial of Service Attack by an Unprivileged User - NL
Lenovo Security Advisory: LEN-14450 Potential Impact: Denial of Service Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3768 Summary Description: A vulnerability was discovered in the Integrated Management Module 2 IMM2 used in some Lenovo servers where an unprivileged...
IMM2 Denial of Service Attack by an Unprivileged User - Lenovo Support NL
No description provided...
Local Privilege Escalation in Realtek Audio Driver - Lenovo Support US
No description provided...
Local Privilege Escalation in Realtek Audio Driver - us
Lenovo Security Advisory: LEN-15759 Potential Impact: Local Privilege Escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3767 Summary Description: A local privilege escalation vulnerability was identified in the Realtek audio driver. An attacker with local privilege...
Privilege Escalation in Dolby DAX2API Service - Lenovo Support US
No description provided...
Privilege Escalation in Dolby DAX2API Service - us
Lenovo Security Advisory: LEN-12704 Potential Impact: Local privilege escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-7293 Summary Description: A privilege escalation vulnerability has been discovered in Dolby’s DAX2API service where a local user can run arbitrar...
Lenovo XClarity Controller (XCC) Risk of Low Entropy - Lenovo Support US
No description provided...
Lenovo XClarity Controller (XCC) Risk of Low Entropy - us
Lenovo Security Advisory: LEN-17904 Potential Impact: An attacker could eavesdrop on encrypted SSH or https-based systems management communications web UI, Redfish, CIM with the server’s XClarity Controller, or spoof the XCC and thereby capture user access credentials for the XCC. The XCC is also...
Vulnerability in Service Assistance GUI for Lenovo Storage and Storwize Products - Lenovo Support NL
No description provided...
Vulnerability in Service Assistance GUI for Lenovo Storage and Storwize Products - lu
Lenovo Security Advisory: LEN-18236 Potential Impact: A vulnerability in the Service Assistant GUI could allow a remote attacker to perform a privilege escalation. Severity: High Scope of Impact: Lenovo Storage/IBM Storwize CVE Identifier: CVE-2017-1710 Summary Description: A vulnerability in the...
LXCA User Account Names Exposed To Unauthenticated Users Who Can Access the Web User Interface - Lenovo Support NL
No description provided...
LXCA User Account Names Exposed To Unauthenticated Users Who Can Access the Web User Interface - lu
Lenovo Security Advisory: LEN-16335 Potential Impact: LXCA user account names may be exposed to unauthenticated users with access to the LXCA web user interface Severity: Medium Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3764 Summary Description: A vulnerability was identified in...
Local Privilege Escalation in Huawei ME906s 4G LTE Mobile Broadband Driver - us
Lenovo Security Advisory: LEN-15815 Potential Impact: Local privilege escalation Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-8185 Summary Description: A local privilege escalation vulnerability has been discovered in the Huawei ME906s 4G LTE Mobile broadband driver used...
Local Privilege Escalation in Huawei ME906s 4G LTE Mobile Broadband Driver - Lenovo Support US
No description provided...
Locked Data on Intel 5400s and 6000p Solid State Drives Could be Corrupted by Malware - us
Lenovo Security Advisory: LEN-15217 Potential Impact: Drive data could be corrupted by malware even when locked Severity: Medium Scope of Impact: Industry wide Summary Description: A vulnerability has been reported by Intel, a manufacturer of Solid State Drives SSDs, with the Intel models 5400s a...
Locked Data on Intel 5400s and 6000p Solid State Drives Could be Corrupted by Malware - Lenovo Support US
No description provided...
Lenovo StorSelect DX8200C glibc, Linux Kernel and Cloudian Management Console Vulnerabilities - Lenovo Support US
No description provided...
Lenovo StorSelect DX8200C glibc, Linux Kernel and Cloudian Management Console Vulnerabilities - us
Lenovo Security Advisory: LEN-17538 Potential Impact: Arbitrary Code Execution Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-1000364, CVE-2017-1000366 Summary: Several vulnerabilities have been identified on the Lenovo StorSelect DX8200C MT 5120 running versions of Cloudi...
Secure BIOS/UEFI Set-up Incomplete in Lenovo E95 and ThinkCentre M710s/M710t - Lenovo Support US
No description provided...
Secure BIOS/UEFI Set-up Incomplete in Lenovo E95 and ThinkCentre M710s/M710t - us
Lenovo Security Advisory: LEN-17417 Potential Impact: Unauthorized bootloader allowed to run during system boot, reducing protection against rootkits Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2017-3771 Summary Description: System boot process is not adequately secured...
Lenovo VIBE, Moto, and ZUK Mobile Phone Remote Code Execution Vulnerability - Lenovo Support US
No description provided...
Lenovo Android Tablet and Lenovo VIBE, Moto, and ZUK Mobile Phone Remote Code Execution Vulnerability - us
Lenovo Security Advisory: LEN-15374 Potential Impact: Remote code execution Severity: High Scope of Impact: All Lenovo Android tablets and the following mobile phones: all Lenovo VIBE and ZUK devices, and the Moto M XT1663 and Moto E3 XT1706 distributed by Lenovo. CVE Identifier: CVE-2017-3758,...
Attacker with Access to LXCA Filesystem Could Access Local LXCA Account Credentials and LXCA Authenticated Command Injection - Lenovo Support US
No description provided...
Attacker with Access to LXCA Filesystem Could Access Local LXCA Account Credentials and LXCA Authenticated Command Injection - us
Lenovo Security Advisory: LEN-16333 Potential Impact: An attacker who obtains access to the location where the LXCA file system is stored could access credentials of local LXCA accounts and Privilege escalation by an authenticated user Severity: Medium to High Scope of Impact: Lenovo Specific CVE...
ThinkPad USB 3.0 Ethernet Adapter Driver Privilege Escalation - us
Lenovo Security Advisory: LEN-9896 Potential Impact: Privilege escalation and executable files without a valid signature Severity: High Scope of Impact: Lenovo Specific CVE Identifier: CVE-2017-3746 Summary Description: During an internal analysis, the ThinkPad USB 3.0 Ethernet Adapter part numbe...
Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - Lenovo Support US
No description provided...
Unquoted Service Path Privilege Escalation in ElanTech Touchpad Driver - us
Lenovo Security Advisory: LEN-14390 Potential Impact: Privilege Escalation Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3757 Summary Description: An unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad used on some Lenovo brand...