1208 matches found
Intel BIOS locking mechanism contains race condition that enables write protection bypass - Lenovo Support US
No description provided...
Potential vulnerability in Intel® SSD Data Center Family for SATA - lu
Lenovo Security Advisory: LEN-6022 Potential Impact: Denial of service Severity:High Scope of Impact: Industry-Wide Summary Description: Intel Solid State Drives SSDs are used in some Lenovo System X servers. The Intel SSD Data Center Family for SATA product series was designed to the ATA-ACS...
Intel BIOS locking mechanism contains race condition that enables write protection bypass
Lenovo Security Advisory: LEN-2015-001 Potential Impact: Denial of Service, Elevation of Privilege Severity: Medium Summary: A race condition exists in computers using Intel chipsets that rely solely on two particular BIOS write locking mechanisms. Successful exploitation of this race condition m...
Lenovo Accelerator Application Insecure Update Mechanism
Lenovo Security Advisory: LEN-6718 Potential Impact: Remote code execution by an attacker with local network access Severity: High Scope of Impact: Lenovo products described below Summary Description: A vulnerability was identified in the Lenovo Accelerator Application software which could lead t...
POODLE: SSLv3 Vulnerability - Lenovo Support US
No description provided...
Unauthorized Modification of UEFI Variables in UEFI Systems - Lenovo Support US
No description provided...
S3 Boot Script Protection
Lenovo Security Advisory: LEN-2014-006 Potential Impact: Elevation of Privilege Severity: Medium Summary: Certain firmware implementations may not correctly protect memory that stores the BIOS S3 Boot Script when a system is suspended. Exploitation of such vulnerabilities could potentially lead t...
GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow ("GHOST")
Lenovo Security Advisory: LEN-2015-007 Potential Impact: Execution of Arbitrary Code Severity: High Summary: A vulnerability has been found in the GNU C Library glibc nsshostnamedigitsdots function that allows both local and remote users to cause a buffer overflow in network function calls...
Unauthorized Modification of UEFI Variables in UEFI Systems
Lenovo Security Advisory: LEN-2014-002 Potential Impact: Modifications of UEFI variables Severity: Medium Summary: Certain firmware implementations may not correctly protect and validate information contained in certain UEFI variables. Exploitation of such vulnerabilities could potentially lead t...
GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow (
No description provided...
Row Hammer Privilege Escalation
Lenovo Security Advisory: LEN-2015-009 Potential Impact: Escalation of Privilege Severity: Medium Summary: The Passgate issue aka “Row Hammer” is an inherent design/process limitation in memory for sub 40nm technology such as DDR3/DDR3L/LPDDR2/LPDDR3/GDDR5 that can cause errors in rows of memory...
POODLE: SSLv3 Vulnerability
Lenovo Security Advisory: LEN-2014-007 Potential Impact: Unauthorized Access; Man-in-the-Middle MitM Attack Severity: Medium Summary: A security vulnerability known as POODLE was publicly announced that affects a relatively low number of Internet connected devices. However, this vulnerability is...
UEFI EDK2 Capsule Update Vulnerabilities
Lenovo Security Advisory: LEN-2014-001 Potential Impact: Execution of arbitrary code Severity: Medium Summary: The EDK2 UEFI reference implementation contains multiple vulnerabilities in the Capsule Update mechanism. Description: The open source EDK2 project provides a reference implementation of...
Overflow in UEFI Variable Reclaim Function - Lenovo Support US
No description provided...
SMM
No description provided...
Potential vulnerability in Intel® SSD Data Center Family for SATA - Lenovo Support NL
No description provided...
Row Hammer Privilege Escalation - Lenovo Support US
No description provided...
S3 Boot Script Protection - Lenovo Support US
No description provided...
SMM "Incursion" Attack
Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...
Lenovo Accelerator Application Insecure Update Mechanism - Lenovo Support US
No description provided...
Overflow in UEFI Variable Reclaim Function
Lenovo Security Advisory: LEN-2014-009 Potential Impact: Elevation of Privilege or Denial of Service Severity: Medium Summary: The EDK1 UEFI reference implementation contains a buffer overflow vulnerability. Description: Taken from US-CERT advisory The open source EDK1 project provides a referenc...
UEFI EDK2 Capsule Update Vulnerabilities - Lenovo Support US
No description provided...
Attackers with physical access to Lenovo RackSwitches may be able to upload unsigned firmware - Lenovo Support US
No description provided...
NVIDIA Windows Privilege Delegation Escalation
Lenovo Security Advisory: LEN-2015-008 Potential Impact: Escalation of Privilege Severity: Medium Summary: The NVIDIA Display Driver’s kernel administrator check improperly validates local client impersonation levels in some cases. Description: This vulnerability can only be exploited by a user...
NVIDIA Windows Privilege Delegation Escalation - Lenovo Support US
No description provided...
Attackers with physical access to Lenovo RackSwitches may be able to upload unsigned firmware
Lenovo Security Advisory: LEN-7805 Potential Impact: Attackers with physical access may be able to upload unsigned firmware Severity: Medium Scope of Impact: Lenovo Summary Description: During internal testing, Lenovo identified a vulnerability in some Lenovo RackSwitch Ethernet switches where an...
TPM "nvLocked" Permanent Flag may not be set
Customers can use the tool provided here that will determine if the “nvLocked” TPM permanent flag is set on their system, and will automatically set the flag if it has not been set already. The program will also show the user if the user non-volatile storage area is being used in their system or...
SMRAM data may be viewed on ThinkPad systems
Lenovo Security Advisory: LEN-3837 Potential Impact: Leakage of SMRAM data Severity: Low Summary: An attacker may be able to view but not modify the contents of System Management RAM SMRAM data on certain Lenovo ThinkPad systems. Description: SMRAM is a part of system memory used by the processor...
LEN-5519: Lenovo System Update Privilege Escalation
Lenovo Security Advisory: LEN-5519 Potential Impact: Local Privilege Escalation Severity: High Scope of Impact: Lenovo Summary Description: During internal testing, Lenovo identified a local privilege escalation vulnerability in Lenovo System Update previously known as ThinkVantage System Update...
SMRAM data may be viewed on ThinkPad systems - Lenovo Support US
No description provided...
LEN-5519: Lenovo System Update Privilege Escalation - Lenovo Support US
No description provided...
Access Connections Privilege Escalation - Lenovo Support US
No description provided...
Privilege Escalation Vulnerabilities within Lenovo Solution Center - Lenovo Support US
No description provided...
Privilege Escalation and Denial of Service Vulnerabilities in System X IMM2 - Lenovo Support US
No description provided...
ThinkCentre Hard Disk Password Bypass - Lenovo Support US
No description provided...
Lenovo Fingerprint Manager - Lenovo Support US
No description provided...
Lenovo Service Engine (LSE) BIOS for Notebook
Lenovo Security Advisory: LEN-2015-020 Potential Impact: Privilege Escalation Severity: High Summary: Vulnerabilities have been identified in the Lenovo Service Engine LSE which may run on certain Lenovo notebook systems that do not have a Lenovo preloaded operating system installed. Lenovo has...
Fingerprint Validity Driver and Synaptics Fingerprint Driver Information Disclosure
Lenovo Security Advisory: LEN-4281 Potential Impact: Disclosure of biometric data Severity: Low Summary Description: A vulnerability has been identified in two drivers associated with biometric fingerprint scanners used on some Lenovo systems that could allow an attacker with local administrative...
Privilege Escalation Vulnerabilities within Lenovo Solution Center
...
Vulnerabilities in VeriFace and VeriFace Pro software
Users can also check for VeriFace Pro updates through the OneKey Optimizer software utility. For Windows 7: Users can run the utility available here to secure the database file permissions on their system...
Lenovo Service Engine (LSE) BIOS for Notebook - Lenovo Support US
No description provided...
ThinkServer *50-series BIOS Password Encryption Weakness - Lenovo Support US
No description provided...
Memory Leakage and Denial of Service Vulnerabilities Identified in Power Manager, Lenovo Settings Dependency Package and ThinkPad Settings Dependency
Lenovo Security Advisory: LEN-6027 Potential Impact: Memory leakage or denial of service attack Severity: Medium Scope of Impact: Lenovo Only Summary Description: Vulnerabilities were identified in the tppwrif driver, which is used by Lenovo software to control power management settings in some...
Privilege Escalation and Denial of Service Vulnerabilities in System X IMM2
...
Fingerprint Validity Driver and Synaptics Fingerprint Driver Information Disclosure - Lenovo Support US
No description provided...
Access Connections Privilege Escalation
Lenovo Security Advisory: LEN-2015-033 Potential Impact: Escalation of Privileges Severity: High Summary: ThinkVantage Access Connections contains a vulnerability that may allow a local user to escalate their privilege level. Description: This vulnerability can be exploited by a user with local...
Multiple ThinkServer System Manager (TSM) *50-series Security Weaknesses - Lenovo Support US
No description provided...
ThinkServer *50-series BIOS Password Encryption Weakness
Lenovo Security Advisory: LEN-2015-018 Potential Impact: Password Disclosure Severity: Low Summary: The ThinkServer 50-series of servers store user and administrator BIOS passwords using a legacy, proprietary form of encryption. This issue was found during an internal security review and correcte...