Skip to content
OpenAdvisories
Medium WID-SEC-2023-0393 25 CVEs

Lenovo Computer: Mehrere Schwachstellen

Published Feb 14, 2023 · Updated Sep 18, 2023 · Revision 4 · de-DE

Vendor: HPE Vendor: Lenovo Vendor: Red Hat Vendor: SUSE Product: Computer Product: Enterprise Linux Product: Linux Product: ProLiant

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Lenovo Computer ausnutzen, um seine Privilegien zu erhöhen oder Informationen offenzulegen.

Product

Lenovo ist ein Hersteller u. a. von Computern.

Vulnerabilities 25

  • High 8.2
    CVE-2022-26343

    Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

  • High 7.5
    CVE-2022-21216

    Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Proc…

    intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-26837

    Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

  • High 7.5
    CVE-2022-30539

    Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable esca…

  • High 7.5
    CVE-2022-32231

    Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

  • High 7.2
    CVE-2022-30704

    Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to poten…

  • High 7.2
    CVE-2022-33196

    Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using …

    intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  • High 7.0
    CVE-2022-32469

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the PnpSmm shared buffer used b…

  • High 7.0
    CVE-2022-32470

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FwBlockServiceSmm shared bu…

  • High 7.0
    CVE-2022-32471

    An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. The IhisiDxe driver uses the comma…

  • High 7.0
    CVE-2022-32473

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the HddPassword shared buffer u…

  • High 7.0
    CVE-2022-32474

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the StorageSecurityCommandDxe s…

  • High 7.0
    CVE-2022-32475

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the VariableRuntimeDxe shared b…

  • High 7.0
    CVE-2022-32476

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the AhciBusDxe shared buffer us…

  • High 7.0
    CVE-2022-32477

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the FvbServicesRuntimeDxe share…

  • High 7.0
    CVE-2022-32478

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the IdeBusDxe shared buffer use…

  • High 7.0
    CVE-2022-32953

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the SdHostDriver buffer used by…

  • High 7.0
    CVE-2022-32954

    An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 5.5. DMA attacks on the SdMmcDevice buffer used by …

  • High 7.0
    CVE-2022-32955

    An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. DMA attacks on the NvmExpressDxe buffer used b…

  • Medium 6.1
    CVE-2022-33972

    Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may al…

    intel-microcode intel-microcode Debian Ubuntu
  • Medium 6.0
    CVE-2022-38090

    Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may al…

    intel-microcode intel-microcode intel-ucode Debian Ubuntu Alpine
  • Low 3.2
    CVE-2021-0187

    Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

  • Unscored —
    CVE-2022-32472 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

  • Unscored —
    CVE-2022-32951 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

  • Unscored —
    CVE-2022-32952 Rejected

    DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

Revision history

  1. #4

    Neue Updates von Red Hat aufgenommen

  2. #3

    Neue Updates von SUSE aufgenommen

  3. #2

    Neue Updates von HP aufgenommen

  4. #1

    Initiale Fassung

References