Lenovo

223 results · Clear filters · Feed

• Medium 6.7
  CVE-2023-34419

  A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an at…

  Lenovo Lenovo Notebook
  Aug 17, 2023
• Medium 6.7
  CVE-2023-4029

  A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow…

  Lenovo ThinkPad
  Aug 17, 2023
• Medium 6.7
  CVE-2023-4028

  A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which ma…

  Lenovo Lenovo Notebook
  Aug 17, 2023
• Medium 6.5
  CVE-2023-34422

  A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through …

  Lenovo Lenovo XClarity Administrator
  Jun 26, 2023
• Medium 6.5
  CVE-2023-34421

  A valid, authenticated LXCA user with elevated privileges may be able to replace filesystem data through a specifically…

  Lenovo Lenovo XClarity Administrator
  Jun 26, 2023
• Medium 5.4
  CVE-2023-2993

  A valid, authenticated user with limited privileges may be able to use specifically crafted web management server API c…

  Lenovo Fan Power Controller (FPC) System Management Module (SMM)
  Jun 26, 2023
• Medium 6.4
  CVE-2023-2290

  A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and ele…

  Lenovo ThinkPad
  Jun 26, 2023
• Medium 6.7
  CVE-2022-48188

  A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could a…

  Lenovo ThinkStation BIOS
  Jun 5, 2023
• Medium 6.7
  CVE-2022-48181

  An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacke…

  Lenovo ThinkStation BIOS
  Jun 5, 2023
• Medium 6.2
  CVE-2022-48186

  A certificate validation vulnerability exists in the Baiying Android application which could lead to information disclo…

  Lenovo Baiying
  May 1, 2023
• Medium 6.3
  CVE-2023-25492

  A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined…

  Lenovo XClarity Controller
  May 1, 2023
• Medium 4.9
  CVE-2023-25495

  A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password …

  Lenovo XClarity Controller
  Apr 28, 2023
• Medium 5.3
  CVE-2023-29056

  A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC. To be…

  Lenovo XClarity Controller
  Apr 28, 2023
• Medium 6.4
  CVE-2023-29058

  A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the …

  Lenovo XClarity Controller
  Apr 28, 2023
• Medium 6.7
  CVE-2022-40137

  A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated pri…

  Lenovo BIOS
  Jan 30, 2023
• Medium 4.4
  CVE-2022-40136

  An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may…

  Lenovo BIOS
  Jan 30, 2023
• Medium 4.4
  CVE-2022-40135

  An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker w…

  Lenovo BIOS
  Jan 30, 2023
• Medium 4.4
  CVE-2022-40134

  An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker …

  Lenovo BIOS
  Jan 30, 2023
• Medium 6.2
  CVE-2022-4816

  A denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a local user to crash the a…

  Lenovo Safecenter
  Jan 23, 2023
• Medium 6.7
  CVE-2022-3432

  A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly n…

  Lenovo BIOS
  Jan 23, 2023
• Medium 6.7
  CVE-2022-3430

  A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with e…

  Lenovo BIOS
  Jan 23, 2023
• Medium 6.7
  CVE-2022-1892

  A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local …

  Lenovo BIOS
  Jan 23, 2023
• Medium 6.7
  CVE-2022-1891

  A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local …

  Lenovo BIOS
  Jan 23, 2023
• Medium 6.7
  CVE-2022-1890

  A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileg…

  Lenovo BIOS
  Jan 23, 2023
• Medium 5.5
  CVE-2022-1109

  An incorrect default permissions vulnerability in Lenovo Leyun cloud music application could allow denial of service.

  Lenovo Leyun
  Jan 20, 2023
• Medium 6.7
  CVE-2022-4435

  A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoRemoteConfigUpdateDxe driver that could al…

  Lenovo ThinkPad X13s
  Jan 5, 2023
• Medium 6.7
  CVE-2022-4434

  A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS driver that could allow a local attacker with el…

  Lenovo ThinkPad X13s
  Jan 5, 2023
• Medium 6.7
  CVE-2022-4433

  A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS LenovoSetupConfigDxe driver that could allow a l…

  Lenovo ThinkPad X13s
  Jan 5, 2023
• Medium 6.7
  CVE-2022-4432

  A buffer over-read vulnerability was reported in the ThinkPadX13s BIOS PersistenceConfigDxe driver that could allow a l…

  Lenovo ThinkPad X13s
  Jan 5, 2023
• Medium 5.5
  CVE-2022-1110

  A buffer overflow vulnerability in Lenovo Smart Standby Driver prior to version 4.1.50.0 could allow a local attacker t…

  Lenovo Smart Standby Driver
  May 18, 2022
• Medium 6.3
  CVE-2021-42851

  A vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an unauthenticated user to …

  Lenovo Personal Cloud Storage T1 Personal Cloud Storage T2 Personal Cloud Storage A1
  May 18, 2022
• Medium 6.8
  CVE-2021-42849

  A weak default password for the serial port was reported in some Lenovo Personal Cloud Storage devices that could allow…

  Lenovo Personal Cloud Storage A1 Personal Cloud Storage X1 Personal Cloud Storage T2Pro
  May 18, 2022
• Medium 4.3
  CVE-2021-42848

  An information disclosure vulnerability was reported in some Lenovo Personal Cloud Storage devices that could allow an …

  Lenovo Personal Cloud Storage T1 Personal Cloud Storage T2 Personal Cloud Storage A1
  May 18, 2022
• Medium 4.3
  CVE-2021-3956

  A read-only authentication bypass vulnerability was reported in the Third Quarter 2021 release of Lenovo XClarity Contr…

  Lenovo XClarity Controller (XCC)
  May 18, 2022
• Medium 6.7
  CVE-2022-1108

  A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X…

  Lenovo ThinkPad BIOS
  Apr 22, 2022
• Medium 6.7
  CVE-2022-1107

  During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI …

  Lenovo ThinkPad BIOS
  Apr 22, 2022
• Medium 5.0
  CVE-2022-0636

  A denial of service vulnerability was reported in Lenovo Thin Installer prior to version 1.3.0039 that could trigger a …

  Lenovo Thin Installer
  Apr 22, 2022
• Medium 6.7
  CVE-2021-4212

  A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook mode…

  Lenovo BIOS
  Apr 22, 2022
• Medium 6.7
  CVE-2021-4211

  A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, Thin…

  Lenovo BIOS
  Apr 22, 2022
• Medium 6.7
  CVE-2021-4210

  A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, an…

  Lenovo BIOS
  Apr 22, 2022