1208 matches found
AMI BIOS SMM Code Execution Vulnerability
Lenovo Security Advisory: LEN-4710 Potential Impact: Execution of code in SMM by an attacker with administrative access Severity: Medium Scope of impact: Industry-wide Summary Description: System Management Mode SMM is the most privileged execution mode of the x86 processor. Software System...
AMI BIOS SMM Code Execution Vulnerability - Lenovo Support US
No description provided...
Maliciously crafted packet sent during PXE boot can cause system hang - bo
Lenovo Security Advisory: LEN-7908 Potential Impact: System hang during PXE boot recoverable on reboot Severity: Medium Scope of Impact: Industry-Wide Summary Description: An industry-wide BIOS vulnerability was identified by the UEFI Security Response team that has been addressed in the latest...
Maliciously crafted packet sent during PXE boot can cause system hang - Lenovo Support BO
No description provided...
Denial of service attack on Lenovo System X M5, M6, and X6 systems - Lenovo Support US
No description provided...
Denial of service attack on Lenovo System X M5, M6, and X6 systems - us
Lenovo Security Advisory: LEN-11306 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8226 Summary Description: A vulnerability was identified in the BIOS of Lenovo System X M5, M6, and X6 systems. An attacker with administrative access...
Lenovo Edge USB Keyboard Driver Local Privilege Escalation - Lenovo Support US
No description provided...
Microsoft Windows 10 Virtualization-Based Security Bypass - Lenovo Support US
No description provided...
Microsoft Windows 10 Virtualization-Based Security Bypass - us
Lenovo Security Advisory: LEN-8584 Potential Impact: Microsoft Virtualization-based security bypass by an attacker with administrative privileges Severity: Medium Scope of Impact: Industry-Wide Summary Description: A vulnerability affecting the virtualization-based security in Microsoft Windows 1...
Lenovo Edge USB Keyboard Driver Local Privilege Escalation - us
Lenovo Security Advisory: LEN-11588 Potential Impact: Escalation of privileges by a local user Severity: High Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8225 Summary Description: A vulnerability was identified in the Lenovo Edge USB Keyboard driver for Windows 7, 8 and 10 where a...
Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems - Lenovo Support US
No description provided...
System Management Mode (SMM) BIOS Vulnerability - Lenovo Support US
No description provided...
System Management Mode (SMM) BIOS Vulnerability - us
Lenovo Security Advisory: LEN-8324 Potential Impact: Execution of code in SMM by an attacker with local administrative access Severity: High Scope of Impact: Industry-wide Update as of 7/28/2016: Refer to "Revision History" for all new updates. Update as of 7/19/2016: Updated the "Product Impact"...
Intel Management Engine protection not set on some Lenovo Notebook and ThinkServer systems - us
Lenovo Security Advisory: LEN-9903 Potential Impact: Denial of service or privilege escalation by an attacker with administrative access Severity: Medium Scope of Impact: Industry-Wide CVE Identifier: CVE-2016-8224 Summary Description: A vulnerability has been identified in some Lenovo Notebook a...
Lenovo System Interface Foundation Privilege Escalation - Lenovo Support US
No description provided...
Microsoft Device Guard protection bypass - us
Lenovo Security Advisory: LEN-8327 Potential Impact: Denial of service Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2016-8222 Summary Description: A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacke...
Microsoft Device Guard protection bypass - Lenovo Support US
No description provided...
Lenovo System Interface Foundation Privilege Escalation - us
Lenovo Security Advisory: LEN-10150 Potential Impact: Local privilege escalation Severity: High Scope of Impact: Lenovo specific CVE Identifier: CVE-2016-8223 Summary Description: During an internal security review, Lenovo identified a local privilege escalation vulnerability in Lenovo System...
GNU Bourne-Again Shell (Bash) 'Shellshock' - Lenovo Support US
No description provided...
NVIDIA GPU Kernel Driver Escape - Lenovo Support US
No description provided...
GNU Bourne-Again Shell (Bash) 'Shellshock'
Lenovo Security Advisory: LEN-2014-003 Potential Impact: Execution of arbitrary code Severity: High Summary: GNU Bash is the common command-line shell used in many Linux/UNIX systems. The vulnerability is also referred to as “Shellshock. ” Exploitation of this vulnerability may allow a remote...
NVIDIA GPU Kernel Driver Escape
Lenovo Security Advisory: LEN-5551 Potential Impact: Privilege escalation, potential information disclosure, crashes or denial of service Severity: High Scope of Impact: Industry-Wide Summary Description: On March 21, 2016, NVIDIA announced three high-severity driver vulnerabilities. These driver...
Data on Toshiba Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility - Lenovo Support US
No description provided...
Data on Toshiba Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility - us
Lenovo Security Advisory: LEN-9458 Potential Impact: Drive data may be able to be recovered after running the secure erase utility Severity: Medium Scope of Impact: Lenovo-specific Summary Description: Toshiba’s firmware used to erase the data on the following SSDs did not meet Lenovo’s...
Local Privilege Escalation or Denial of Service via the Intel® Graphics Driver - Lenovo Support US
No description provided...
Intel releases fix for sleep mode configuration bypass - Lenovo Support US
No description provided...
BIOS EFI Driver SMM Code Execution Vulnerability - my
Lenovo Security Advisory: LEN-4901 Potential Impact: Execution of code in SMM by an attacker with local administrative access Severity: Medium Scope of Impact: Lenovo specific Summary Description: System Management Mode SMM is the most privileged execution mode of the x86 processor. A vulnerabili...
Intel releases fix for sleep mode configuration bypass
Lenovo Security Advisory: LEN-2015-049, LEN-2015-050, LEN-2015-051 Potential Impact: Elevation of Privilege Severity: High Summary: Intel has released an update that has been incorporated into the latest Lenovo BIOS to fix vulnerabilities dealing with systems going into sleep mode. Description:...
Memory corruption due to an unsanitized pointer in the NVIDIA display driver - Lenovo Support US
No description provided...
BIOS EFI Driver SMM Code Execution Vulnerability - Lenovo Support MY
No description provided...
Security Losses from Obsolete and Truncated Transcript Hashes (SLOTH)
Lenovo Security Advisory: LEN-4603 Potential Impact: An attacker with man-in-the-middle capabilities could decrypt encrypted traffic or impersonate a legitimate client or server Severity: Medium Scope of Impact: Industry-Wide Summary Description: A flaw was found in the way the TLS 1.2 protocol...
Security Losses from Obsolete and Truncated Transcript Hashes (SLOTH) - Lenovo Support US
No description provided...
Memory corruption due to an unsanitized pointer in the NVIDIA display driver
Lenovo Security Advisory: LEN-3313 Potential Impact: Escalation of privileges Severity: Medium Summary: A vulnerability has been found in the NVIDIA driver that could be used to allow a local, non-privileged user to corrupt kernel memory. This could be used to gain local root privileges...
Lenovo 500 Wireless Keyboard or Mouse Keystroke Injection
Lenovo Security Advisory: LEN-4292 Potential Impact: Potential unwanted data input Severity: Low Summary: An unauthorized attacker may be able to enter keyboard inputs through the Lenovo 500 Wireless keyboard or mouse dongle. Description: A vulnerability was identified where an attacker with...
Lenovo Mouse Suite Escalation of Privileges
Lenovo Security Advisory: LEN-2015-066 Potential Impact: Escalation of Privileges Severity: High Summary: A user with local privileges may be able to run files as an administrator in Lenovo Mouse Suite included with ThinkPad Precision Wireless Mouse –part number 0B47161. Description: The Lenovo...
Lenovo XClarity Administrator (LXCA) Local Privilege Escalation - lu
Lenovo Security Advisory: LEN-7145 Potential Impact: Local privilege escalation Severity:High Scope of Impact: Lenovo Summary Description: During internal testing, Lenovo identified a local privilege escalation vulnerability in certain versions of LXCA that could allow a local user with...
Accessing data on Self-Encrypting drives while a system is in sleep state
Lenovo Security Advisory: LEN-2910 Potential Impact: Physical access of encrypted data Severity: Informational Summary: At the BlackHat Europe 2015 conference, KPMG disclosed an industry-wide vulnerability affecting hard disk drives that employ hardware-based Full Disk Encryption FDE. These drive...
Accessing data on Self-Encrypting drives while a system is in sleep state - Lenovo Support US
No description provided...
Lenovo Mouse Suite Escalation of Privileges - Lenovo Support US
No description provided...
Lenovo XClarity Administrator (LXCA) Local Privilege Escalation - Lenovo Support NL
No description provided...
Lenovo Service Engine (LSE) BIOS for Desktop
Lenovo Security Advisory: LEN-2015-077 Potential Impact: Limited use of system resources Severity: Low Summary: Lenovo has released a utility to remove files configured by Lenovo Service Engine LSE on desktop systems running Windows 8 and 8.1 to follow updated security guidelines from Microsoft...
Lenovo 500 Wireless Keyboard or Mouse Keystroke Injection - Lenovo Support US
No description provided...
Dolby Audio X2 (DAX2) privilege escalation
A vulnerability has been identified with the file permissions for the Dolby DAX2 application programming interface API that could allow a local user to run files with system level privileges. Mitigation Strategy for Customers what you should do to protect yourself: Lenovo is currently working wit...
Dolby Audio X2 (DAX2) privilege escalation - Lenovo Support US
No description provided...
Lenovo Ultraslim Wireless Keyboard Keystroke Injection - Lenovo Support NL
No description provided...
Lenovo Ultraslim Wireless Keyboard Keystroke Injection - lu
Lenovo Security Advisory: LEN-7267 Potential Impact: Potential unwanted data input Severity: Medium Scope of Impact: Industry-Wide Summary Description: A vulnerability was identified where an attacker with specialized equipment who is within close physical proximity to a system with the dongle fo...
Data on SanDisk Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility - Lenovo Support US
No description provided...
Data on SanDisk Solid State Drives may be recoverable after running the BIOS Secure Erase Function or the ThinkPad Drive Erase Utility
Lenovo Security Advisory: LEN-5595 Potential Impact: Drive data may be able to be recovered after running the secure erase utility Severity:Medium Scope of Impact: Lenovo Summary Description: SanDisk’s firmware used to erase the data on these SSDs did not meet Lenovo’s specifications and it was...
SuperFish Vulnerability
Lenovo Security Advisory: LEN-2015-010 Potential Impact: Man-in-the-Middle Attack Severity: High Summary: This advisory only applies to Lenovo Notebook products. ThinkPad, ThinkCentre, Lenovo Desktop, ThinkStation, ThinkServer and System x products are not impacted. SuperFish was previously...