Summary
Ein lokaler Angreifer kann mehrere Schwachstellen im Lenovo BIOS ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, beliebigen Programmcode auszuführen, Dateien zu manipulieren oder Informationen offenzulegen.
Product
Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.
Vulnerabilities 26
-
Medium 6.7
A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and T…
-
Medium 6.7
A potential vulnerability were reported in the BIOS of some Desktop, Smart Edge, and ThinkStation products that could a…
-
Medium 6.7
A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a loc…
-
Medium 6.7
A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker wit…
-
Medium 6.7
A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacke…
-
Medium 6.7
A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local…
-
Medium 6.7
A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may a…
-
Medium 6.7
A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local …
-
Medium 6.7
A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker w…
-
Medium 6.7
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker wi…
-
Medium 6.7
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker w…
-
Medium 6.7
A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker …
-
Medium 6.7
A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attack…
-
Medium 6.7
A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker…
-
Medium 6.7
A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevate…
-
Medium 6.7
A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated pr…
-
Medium 6.7
A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated pr…
-
Medium 6.7
A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with e…
-
Medium 6.7
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated p…
-
Medium 6.7
A buffer overflow was reported in the FmpSipoCapsuleDriver driver in the IdeaPad Duet 3-10IGL5 that may allow a local a…
-
Medium 6.7
A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileg…
-
Medium 4.4
A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a lo…
-
Medium 4.4
A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a loca…
-
Medium 4.4
A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may …
-
Unscored —
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via lo…
-
Unscored —
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via lo…
Revision history
-
#1
Initiale Fassung
References
-
Lenovo Security Advisory: LEN-141775 vom 2023-11-08
https://support.lenovo.com/us/en/product_security/LEN-141775