1178 matches found
QEMU i8254 PIT Emulation Bug
Lenovo Security Advisory: LEN-2015-075 Potential Impact: Escalation of Privileges Severity: High Summary: A vulnerability was reported in QEMU where a local user on the guest system could potentially obtain elevated privileges on the target host system. This vulnerability was reported to Red Hat...
Inherent Risks of Using the Intelligent Platform Management Interface (IPMI) on the Lenovo System x Integrated Management Module (IMM), Integrated Management Module II (IMM2) and ThinkServer TSM - Lenovo Support US
No description provided...
Privilege escalation vulnerabilities in IBM System Networking Switch Center and Lenovo Switch Center - Lenovo Support US
No description provided...
Information about LenovoEMC devices may be disclosed if the device has an Internet-accessible management interface - Lenovo Support US
No description provided...
Inherent Risks of Using the Intelligent Platform Management Interface (IPMI) on the Lenovo System x Integrated Management Module (IMM), Integrated Management Module II (IMM2) and ThinkServer TSM - us
Lenovo Security Advisory: LEN-10617 Potential Impact: Access to systems through IPMI if default settings are not changed Severity: High Scope of Impact: Industry-Wide CVE Identifiers: CVE-2013-4037, CVE-2013-4031 Summary Description: Various risks with the industry-standard Intelligent Platform...
Samba Remote Code Execution Vulnerability
Lenovo Security Advisory: LEN-2015-016 Potential Impact: Execution of arbitrary code Severity: High Summary: Samba is an open-source implementation of the Server Message Block SMB or Common Internet File System CIFS protocol, which allows PC-compatible machines to share files, printers, and other...
Privilege escalation vulnerabilities in IBM System Networking Switch Center and Lenovo Switch Center
Lenovo Security Advisory:LEN-2015-074, LEN-2746 Potential Impact: Escalation of Privileges Severity: High Summary: Multiple vulnerabilities have been identified in the following products: - IBM System Networking Switch Center - Lenovo Switch Center Description: Lenovo Switch Center, previously...
Information about LenovoEMC devices may be disclosed if the device has an Internet-accessible management interface
Lenovo Security Advisory: LEN-3846 Potential Impact: Disclosure of information about device Severity:Low Summary: An unauthenticated user may be able to view device information about the LenovoEMC device if the management interface accessible over the internet. Even with this vunerability, no dat...
Temporary Lenovo XClarity Administrator (LXCA) credentials may be exposed - us
Lenovo Security Advisory: LEN-10605 Potential Impact: Disclosure of temporary software-defined administrator credentials for LXCA by a non-privileged user Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8221 Summary Description: During an internal security review, Lenovo...
Certain BIOS versions may include an AMI Test Key that could compromise Secure Boot protections - Lenovo Support NL
No description provided...
Samba Remote Code Execution Vulnerability - Lenovo Support US
No description provided...
Venom
Lenovo Security Advisory: LEN-2015-046 Potential Impact: Escalation of Privileges Severity: High Summary: A buffer overflow vulnerability affecting the Floppy Disk Controller FDC emulation implemented in the QEMU component has been identified in the KVM/QEMU and Xen hypervisors. This vulnerabilit...
Temporary Lenovo XClarity Administrator (LXCA) credentials may be exposed - Lenovo Support US
No description provided...
USB Enhanced Performance Keyboard - Lenovo Support US
No description provided...
Venom - Lenovo Support US
No description provided...
USB Enhanced Performance Keyboard
Lenovo Security Advisory: LEN-2015-015 Potential Impact: Escalation of Privilege Severity: Low Summary: Lenovo’s “USB Enhanced Performance Keyboard” software has a known issue where debug code was accidently left in the application. The debug code includes information about which keys on the...
LEN-7814 Lenovo Solution Center Arbitrary Process Termination or Code Execution by Unprivileged Local Users - my
Lenovo Security Advisory: LEN-7814 Potential Impact: Arbitrary process termination or code execution by unprivileged local users Severity: High Scope of Impact: Lenovo specific Summary Description: Local privilege escalation vulnerabilities were identified in Lenovo Solution Center where...
LEN-7814 Lenovo Solution Center Arbitrary Process Termination or Code Execution by Unprivileged Local Users - Lenovo Support MY
No description provided...
Privilege Escalation Vulnerability in Lenovo Transition Application - us
Lenovo Security Advisory: LEN-12508 Potential Impact: Local privilege escalation Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8227 Summary Description: A vulnerability was identified in the Lenovo Transition program specific to some Lenovo Yoga, Flex and Miix systems...
Privilege Escalation Vulnerability in Lenovo Transition Application - Lenovo Support US
No description provided...
AMI BIOS SMM Code Execution Vulnerability
Lenovo Security Advisory: LEN-4710 Potential Impact: Execution of code in SMM by an attacker with administrative access Severity: Medium Scope of impact: Industry-wide Summary Description: System Management Mode SMM is the most privileged execution mode of the x86 processor. Software System...
AMI BIOS SMM Code Execution Vulnerability - Lenovo Support US
No description provided...
Maliciously crafted packet sent during PXE boot can cause system hang - bo
Lenovo Security Advisory: LEN-7908 Potential Impact: System hang during PXE boot recoverable on reboot Severity: Medium Scope of Impact: Industry-Wide Summary Description: An industry-wide BIOS vulnerability was identified by the UEFI Security Response team that has been addressed in the latest...
Maliciously crafted packet sent during PXE boot can cause system hang - Lenovo Support BO
No description provided...
Denial of service attack on Lenovo System X M5, M6, and X6 systems - us
Lenovo Security Advisory: LEN-11306 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8226 Summary Description: A vulnerability was identified in the BIOS of Lenovo System X M5, M6, and X6 systems. An attacker with administrative access...
Denial of service attack on Lenovo System X M5, M6, and X6 systems - Lenovo Support US
No description provided...
Microsoft Windows 10 Virtualization-Based Security Bypass - us
Lenovo Security Advisory: LEN-8584 Potential Impact: Microsoft Virtualization-based security bypass by an attacker with administrative privileges Severity: Medium Scope of Impact: Industry-Wide Summary Description: A vulnerability affecting the virtualization-based security in Microsoft Windows 1...
Lenovo Edge USB Keyboard Driver Local Privilege Escalation - Lenovo Support US
No description provided...
Lenovo Edge USB Keyboard Driver Local Privilege Escalation - us
Lenovo Security Advisory: LEN-11588 Potential Impact: Escalation of privileges by a local user Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8225 Summary Description: A vulnerability was identified in the Lenovo Edge USB Keyboard driver for Windows 7, 8 and 10 where a...
Microsoft Windows 10 Virtualization-Based Security Bypass - Lenovo Support US
No description provided...
Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems - Lenovo Support US
No description provided...
System Management Mode (SMM) BIOS Vulnerability - Lenovo Support US
No description provided...
System Management Mode (SMM) BIOS Vulnerability - us
Lenovo Security Advisory: LEN-8324 Potential Impact: Execution of code in SMM by an attacker with local administrative access Severity: High Scope of Impact: Industry-wide Update as of 7/28/2016: Refer to "Revision History" for all new updates. Update as of 7/19/2016: Updated the "Product Impact"...
Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems - us
Lenovo Security Advisory: LEN-9903 Potential Impact: Denial of service or privilege escalation by an attacker with administrative access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8224 Summary Description: A vulnerability has been identified in some Lenovo Notebook a...
Microsoft Device Guard protection bypass - us
Lenovo Security Advisory: LEN-8327 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8222 Summary Description: A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacke...
Lenovo System Interface Foundation Privilege Escalation - Lenovo Support US
No description provided...
Microsoft Device Guard protection bypass - Lenovo Support US
No description provided...
Lenovo System Interface Foundation Privilege Escalation - us
Lenovo Security Advisory: LEN-10150 Potential Impact: Local privilege escalation Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8223 Summary Description: During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System...
GNU Bourne-Again Shell (Bash) 'Shellshock' - Lenovo Support US
No description provided...
NVIDIA GPU Kernel Driver Escape - Lenovo Support US
No description provided...
GNU Bourne-Again Shell (Bash) 'Shellshock'
Lenovo Security Advisory: LEN-2014-003 Potential Impact: Execution of arbitrary code Severity: High Summary: GNU Bash is the common command-line shell used in many Linux/UNIX systems. The vulnerability is also referred to as “Shellshock. ” Exploitation of this vulnerability may allow a remote...
NVIDIA GPU Kernel Driver Escape
Lenovo Security Advisory: LEN-5551 Potential Impact: Privilege escalation, potential information disclosure, crashes or denial of service Severity: High Scope of Impact: Industry-Wide Summary Description: On March 21, 2016, NVIDIA announced three high-severity driver vulnerabilities. These driver...
Data on Toshiba Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility - Lenovo Support US
No description provided...
Data on Toshiba Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility - us
Lenovo Security Advisory: LEN-9458 Potential Impact: Drive data may be able to be recovered after running the secure erase utility Severity: Medium Scope of Impact: Lenovo-specific Summary Description: Toshiba’s firmware used to erase the data on the following SSDs did not meet Lenovo’s...
Local Privilege Escalation or Denial of Service via the Intel® Graphics Driver - Lenovo Support US
No description provided...
BIOS EFI Driver SMM Code Execution Vulnerability - my
Lenovo Security Advisory: LEN-4901 Potential Impact: Execution of code in SMM by an attacker with local administrative access Severity: Medium Scope of Impact: Lenovo specific Summary Description: System Management Mode SMM is the most privileged execution mode of the x86 processor. A vulnerabili...
Intel releases fix for sleep mode configuration bypass - Lenovo Support US
No description provided...
BIOS EFI Driver SMM Code Execution Vulnerability - Lenovo Support MY
No description provided...
Intel releases fix for sleep mode configuration bypass
Lenovo Security Advisory: LEN-2015-049, LEN-2015-050, LEN-2015-051 Potential Impact: Elevation of Privilege Severity: High Summary: Intel has released an update that has been incorporated into the latest Lenovo BIOS to fix vulnerabilities dealing with systems going into sleep mode. Description:...