1200 matches found
Lenovo Accelerator Application Insecure Update Mechanism
Lenovo Security Advisory: LEN-6718 Potential Impact: Remote code execution by an attacker with local network access Severity: High Scope of Impact: Lenovo products described below Summary Description: A vulnerability was identified in the Lenovo Accelerator Application software which could lead t...
POODLE: SSLv3 Vulnerability
Lenovo Security Advisory: LEN-2014-007 Potential Impact: Unauthorized Access; Man-in-the-Middle MitM Attack Severity: Medium Summary: A security vulnerability known as POODLE was publicly announced that affects a relatively low number of Internet connected devices. However, this vulnerability is...
Row Hammer Privilege Escalation
Lenovo Security Advisory: LEN-2015-009 Potential Impact: Escalation of Privilege Severity: Medium Summary: The Passgate issue aka “Row Hammer” is an inherent design/process limitation in memory for sub 40nm technology such as DDR3/DDR3L/LPDDR2/LPDDR3/GDDR5 that can cause errors in rows of memory...
UEFI EDK2 Capsule Update Vulnerabilities
Lenovo Security Advisory: LEN-2014-001 Potential Impact: Execution of arbitrary code Severity: Medium Summary: The EDK2 UEFI reference implementation contains multiple vulnerabilities in the Capsule Update mechanism. Description: The open source EDK2 project provides a reference implementation of...
GNU C Library (glibc) __nss_hostname_digits_dots() function vulnerable to buffer overflow (
No description provided...
SMM "Incursion" Attack
Lenovo Security Advisory: LEN-2015-002 Potential Impact: Execute arbitrary code, Bypass Secure Boot, Denial of Service, Escalation of Privilege Severity: Medium Summary: Some BIOS implementations permit unsafe System Management Mode SMM function calls to memory locations outside of System...
S3 Boot Script Protection - Lenovo Support US
No description provided...
SMM
No description provided...
UEFI EDK2 Capsule Update Vulnerabilities - Lenovo Support US
No description provided...
Potential vulnerability in Intel® SSD Data Center Family for SATA - Lenovo Support NL
No description provided...
Lenovo Accelerator Application Insecure Update Mechanism - Lenovo Support US
No description provided...
Overflow in UEFI Variable Reclaim Function - Lenovo Support US
No description provided...
Row Hammer Privilege Escalation - Lenovo Support US
No description provided...
Overflow in UEFI Variable Reclaim Function
Lenovo Security Advisory: LEN-2014-009 Potential Impact: Elevation of Privilege or Denial of Service Severity: Medium Summary: The EDK1 UEFI reference implementation contains a buffer overflow vulnerability. Description: Taken from US-CERT advisory The open source EDK1 project provides a referenc...
Attackers with physical access to Lenovo RackSwitches may be able to upload unsigned firmware - Lenovo Support US
No description provided...
NVIDIA Windows Privilege Delegation Escalation - Lenovo Support US
No description provided...
Attackers with physical access to Lenovo RackSwitches may be able to upload unsigned firmware
Lenovo Security Advisory: LEN-7805 Potential Impact: Attackers with physical access may be able to upload unsigned firmware Severity: Medium Scope of Impact: Lenovo Summary Description: During internal testing, Lenovo identified a vulnerability in some Lenovo RackSwitch Ethernet switches where an...
NVIDIA Windows Privilege Delegation Escalation
Lenovo Security Advisory: LEN-2015-008 Potential Impact: Escalation of Privilege Severity: Medium Summary: The NVIDIA Display Driver’s kernel administrator check improperly validates local client impersonation levels in some cases. Description: This vulnerability can only be exploited by a user...
TPM "nvLocked" Permanent Flag may not be set
Customers can use the tool provided here that will determine if the “nvLocked” TPM permanent flag is set on their system, and will automatically set the flag if it has not been set already. The program will also show the user if the user non-volatile storage area is being used in their system or...
LEN-5519: Lenovo System Update Privilege Escalation
Lenovo Security Advisory: LEN-5519 Potential Impact: Local Privilege Escalation Severity: High Scope of Impact: Lenovo Summary Description: During internal testing, Lenovo identified a local privilege escalation vulnerability in Lenovo System Update previously known as ThinkVantage System Update...
LEN-5519: Lenovo System Update Privilege Escalation - Lenovo Support US
No description provided...
SMRAM data may be viewed on ThinkPad systems - Lenovo Support US
No description provided...
SMRAM data may be viewed on ThinkPad systems
Lenovo Security Advisory: LEN-3837 Potential Impact: Leakage of SMRAM data Severity: Low Summary: An attacker may be able to view but not modify the contents of System Management RAM SMRAM data on certain Lenovo ThinkPad systems. Description: SMRAM is a part of system memory used by the processor...
Fingerprint Validity Driver and Synaptics Fingerprint Driver Information Disclosure
Lenovo Security Advisory: LEN-4281 Potential Impact: Disclosure of biometric data Severity: Low Summary Description: A vulnerability has been identified in two drivers associated with biometric fingerprint scanners used on some Lenovo systems that could allow an attacker with local administrative...
Access Connections Privilege Escalation - Lenovo Support US
No description provided...
Memory Leakage and Denial of Service Vulnerabilities Identified in Power Manager, Lenovo Settings Dependency Package and ThinkPad Settings Dependency
Lenovo Security Advisory: LEN-6027 Potential Impact: Memory leakage or denial of service attack Severity: Medium Scope of Impact: Lenovo Only Summary Description: Vulnerabilities were identified in the tppwrif driver, which is used by Lenovo software to control power management settings in some...
Lenovo Service Engine (LSE) BIOS for Notebook
Lenovo Security Advisory: LEN-2015-020 Potential Impact: Privilege Escalation Severity: High Summary: Vulnerabilities have been identified in the Lenovo Service Engine LSE which may run on certain Lenovo notebook systems that do not have a Lenovo preloaded operating system installed. Lenovo has...
Vulnerabilities in VeriFace and VeriFace Pro software
Users can also check for VeriFace Pro updates through the OneKey Optimizer software utility. For Windows 7: Users can run the utility available here to secure the database file permissions on their system...
ThinkServer *50-series BIOS Password Encryption Weakness - Lenovo Support US
No description provided...
Lenovo Service Engine (LSE) BIOS for Notebook - Lenovo Support US
No description provided...
ThinkCentre Hard Disk Password Bypass - Lenovo Support US
No description provided...
Privilege Escalation and Denial of Service Vulnerabilities in System X IMM2 - Lenovo Support US
No description provided...
Privilege Escalation Vulnerabilities within Lenovo Solution Center - Lenovo Support US
No description provided...
Lenovo Fingerprint Manager - Lenovo Support US
No description provided...
Privilege Escalation Vulnerabilities within Lenovo Solution Center
...
Privilege Escalation and Denial of Service Vulnerabilities in System X IMM2
...
ThinkServer *50-series BIOS Password Encryption Weakness
Lenovo Security Advisory: LEN-2015-018 Potential Impact: Password Disclosure Severity: Low Summary: The ThinkServer 50-series of servers store user and administrator BIOS passwords using a legacy, proprietary form of encryption. This issue was found during an internal security review and correcte...
Fingerprint Validity Driver and Synaptics Fingerprint Driver Information Disclosure - Lenovo Support US
No description provided...
Multiple ThinkServer System Manager (TSM) *50-series Security Weaknesses - Lenovo Support US
No description provided...
LEN-2015-011: Lenovo System Update Privilege Escalation - Lenovo Support US
No description provided...
Vulnerabilities in VeriFace and VeriFace Pro software - Lenovo Support US
No description provided...
Lenovo Fingerprint Manager and Lenovo Touch Fingerprint Software Privilege Escalation
Mitigation Strategy for Customers what you should do to protect yourself: There are several ways you can protect yourself. Lenovo recommends that you take one of the following steps: • Starting from March 18, 2016, run Lenovo System Update and install the recommended Fingerprint Manager or Lenovo...
LEN-2015-011: Lenovo System Update Privilege Escalation
Lenovo Security Advisory: LEN-2015-011 Potential Impact: Execution of arbitrary code Severity: Medium Summary: Several vulnerabilities have been identified within Lenovo System Update previously known as ThinkVantage System Update. Lenovo has released a new version of the Lenovo System Update...
Lenovo Fingerprint Manager
Lenovo Security Advisory: LEN-2015-017 Potential Impact: Privilege Escalation Severity: Medium Summary: Lenovo Fingerprint Manger has a local privilege escalation vulnerability. This vulnerability cannot be remotely exploited. A local user logged in to the PC could escalate their privileges by...
Access Connections Privilege Escalation
Lenovo Security Advisory: LEN-2015-033 Potential Impact: Escalation of Privileges Severity: High Summary: ThinkVantage Access Connections contains a vulnerability that may allow a local user to escalate their privilege level. Description: This vulnerability can be exploited by a user with local...
Multiple ThinkServer System Manager (TSM) *50-series Security Weaknesses
Lenovo Security Advisory: LEN-2015-024 Potential Impact: Unauthorized Access; Escalation of Privilege; Denial of Service; Man-in-the-Middle MitM Attack Severity: High Summary: Multiple security weaknesses were discovered in the ThinkServer System Manager TSM Baseboard Management Controller for th...
ThinkCentre Hard Disk Password Bypass
Potential Impact: Severity Summary Description: Mitigation Strategy for Customers what you should do to protect yourself: Update to the latest BIOS for the affected ThinkCentre by following the instructions in the readme file from the links below. Users can also update their BIOS through Lenovo...