Vendor

Lenovo

474 known vulnerabilities.

Products

BIOS 32 Desktop BIOS 16 Vantage 15 PC Manager 15 XClarity Controller 12 App Store 11 Printers 11 Service Bridge 10 ThinkPad BIOS 10 XClarity Administrator (LXCA) 9 Lenovo XClarity Administrator 9 PCManager 9 XClarity Administrator 9 ThinkSystem SMM 9 Iomega StorCenter 9 LenovoEMC 9 EZ Media and Backup Center 9 Browser 7 ThinkPad 6 Baiying 5 System Update 5 HX5530 Appliance (ThinkAgile) XCC 5 HX7530 Appliance (ThinkAgile) XCC 5 ST250 V3 (ThinkSystem) XCC 5 VX3331 Certified Node (ThinkAgile) XCC 5 HX Enclosure Certified Node (ThinkAgile) XCC 5 HX1021 Edge Certified Node 3yr (ThinkAgile) XCC 5 HX1320 Appliance (ThinkAgile) XCC 5 HX1321 Certified Node (ThinkAgile) XCC 5 HX1331 Certified Node (ThinkAgile) XCC 5 HX1520-R Appliance (ThinkAgile) XCC 5 HX1521-R Certified Node (ThinkAgile) XCC 5 HX2320-E Appliance (ThinkAgile) XCC 5 HX2321 Certified Node (ThinkAgile) XCC 5 HX2330 Appliance (ThinkAgile) XCC 5 HX2331 Certified Node (ThinkAgile) XCC 5 HX2720-E Appliance (ThinkAgile) XCC 5 HX3320 Appliance (ThinkAgile) XCC 5 HX3321 Certified Node (ThinkAgile) XCC 5 Idea Tab Pro (TB373FU) 5

All Critical High Medium Low Exploited only Public exploit

223 results · Clear filters · Feed

Medium 6.7

CVE-2021-3972 Public exploit

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS …

Lenovo Notebook BIOS

Apr 22, 2022
Medium 6.7

CVE-2021-3971

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook device…

Lenovo Notebook BIOS

Apr 22, 2022
Medium 6.7

CVE-2021-3970

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models B…

Lenovo Notebook BIOS

Apr 22, 2022
Medium 5.0

CVE-2021-3722

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.40.2175 that could allow config…

Lenovo PCManager

Apr 22, 2022
Medium 5.5

CVE-2021-3721

A denial of service vulnerability was reported in Lenovo PCManager prior to version 4.0.20.10282 that could allow an at…

Lenovo PCManager

Apr 22, 2022
Medium 6.7

CVE-2021-3843

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local…

Lenovo ThinkPad BIOS

Nov 12, 2021
Medium 4.4

CVE-2021-3786

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad …

Lenovo Notebook and ThinkPad BIOS

Nov 12, 2021
Medium 5.5

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro (L79031) and…

Lenovo Legion Phone2 Pro (L70081) Legion Phone Pro (L79031)

Nov 12, 2021
Medium 6.7

CVE-2021-3719

A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from…

Lenovo ThinkCentre and ThinkStation BIOS

Nov 12, 2021
Medium 4.3

CVE-2021-3718

A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enha…

Lenovo ThinkPad BIOS

Nov 12, 2021
Medium 6.7

CVE-2021-3599

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an…

Lenovo ThinkPad BIOS

Nov 12, 2021
Medium 6.4

CVE-2021-3519

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when …

Lenovo Desktop BIOS

Nov 12, 2021
Medium 6.6

CVE-2021-3615

A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow code execution if a specific file …

Lenovo Smart Camera X3, X5, and C2E firmware

Aug 17, 2021
Medium 6.4

CVE-2021-3614

A vulnerability was reported on some Lenovo Notebook systems that could allow an attacker with physical access to eleva…

Lenovo Notebook BIOS

Jul 16, 2021
Medium 6.8

CVE-2021-3453

Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could…

Lenovo BIOS

Jul 16, 2021
Medium 6.7

CVE-2021-3452

A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker wi…

Lenovo ThinkPad BIOS

Jul 16, 2021
Medium 5.5

CVE-2021-3451

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow con…

Lenovo PCManager

Apr 27, 2021
Medium 4.5

CVE-2021-3473

An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/res…

Lenovo XClarity Controller (XCC)

Apr 13, 2021
Medium 5.5

CVE-2021-3462

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, tha…

Lenovo Power Management Driver for Windows 10 Windows

Apr 13, 2021
Medium 4.2

CVE-2021-3463

A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54,…

Lenovo Power Management Driver for Windows 10 Windows

Apr 13, 2021
Medium 4.9

CVE-2021-3417

An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Adm…

Lenovo XClarity Orchestrator

Mar 9, 2021
Medium 5.5

CVE-2020-8357

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow con…

Lenovo PCManager

Mar 9, 2021
Medium 4.9

CVE-2020-8356

An internal product security audit of LXCO, prior to version 1.2.2, discovered that optional passwords, if specified, f…

Lenovo XClarity Orchestrator

Mar 9, 2021
Medium 4.9

CVE-2020-8355

An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Window…

Lenovo XClarity Administrator

Feb 10, 2021
Medium 6.7

CVE-2020-8353

Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configu…

Lenovo Desktop and Workstation systems

Nov 11, 2020
Medium 6.4

CVE-2020-8354

A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook mo…

Lenovo BIOS

Nov 11, 2020
Medium 6.4

CVE-2020-8332

A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo a…

IBM Lenovo System x System x

Oct 14, 2020
Medium 6.1

CVE-2020-8348

A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.…

Lenovo Enterprise Network Disk

Sep 24, 2020
Medium 6.1

CVE-2020-8347

A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6…

Lenovo Enterprise Network Disk

Sep 24, 2020
Medium 6.4

CVE-2020-8333

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStati…

Lenovo BIOS

Sep 24, 2020
Medium 5.5

CVE-2020-8346

A denial of service vulnerability was reported in the Lenovo Vantage component called Lenovo System Interface Foundatio…

Lenovo System Interface Foundation

Sep 15, 2020
Medium 6.3

CVE-2020-8340

A cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 (Integrated Manage…

IBM Lenovo System x IMM2 firmware for x240 M5, Machine Types: 9532, 2591 System x IMM2 firmware for: x240, Machine Types: 7162, 2588; x440, Machine Type 7167, 2590 ; x3750 M4, Machine Type: 8753 ; x3250 M6, Machine type 3633, 3943 ; nx360 M5, Machine type 5465,

Sep 15, 2020
Medium 6.1

CVE-2020-8335

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad A285, BIOS versions up to r0xuj70w; A485, BIOS…

Lenovo ThinkPad A485 BIOS ThinkPad T495s/X395 BIOS ThinkPad A285 BIOS

Sep 1, 2020
Medium 6.1

CVE-2020-8334

The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 whic…

Lenovo BIOS

Jun 9, 2020
Medium 6.4

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmwa…

Lenovo BIOS

Jun 9, 2020
Medium 6.4

CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStati…

Lenovo BIOS

Jun 9, 2020
Medium 6.4

CVE-2020-8321

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo No…

Lenovo BIOS

Jun 9, 2020
Medium 6.4

CVE-2020-8322

A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkS…

Lenovo BIOS

Jun 9, 2020
Medium 6.4

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

Lenovo BIOS

Jun 9, 2020
Medium 6.7

CVE-2019-6196

A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged fi…

Lenovo Installation Packages

Jun 9, 2020