lenovo Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/lenovo/ Sun, 26 Feb 2023 09:05:49 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png lenovo Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/lenovo/ 32 32 CVE-2007-1307 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1307/ Sun, 26 Feb 2023 09:05:49 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1307/ Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impact and attack vectors.

The post CVE-2007-1307 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impact and attack vectors.

The post CVE-2007-1307 appeared first on CVE Vulnerability.

]]> CVE-2018-9069 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9069/ Sun, 26 Feb 2023 06:51:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9069/ In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

The post CVE-2018-9069 appeared first on CVE Vulnerability.

]]> In some Lenovo IdeaPad consumer notebook models, a race condition in the BIOS flash device locking mechanism is not adequately protected against, potentially allowing an attacker with administrator access to alter the contents of BIOS.

The post CVE-2018-9069 appeared first on CVE Vulnerability.

]]> CVE-2018-9063 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9063/ Sun, 26 Feb 2023 06:51:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9063/ MapDrv (C:Program FilesLenovoSystem Updatemapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program’s buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run […]

The post CVE-2018-9063 appeared first on CVE Vulnerability.

]]> MapDrv (C:Program FilesLenovoSystem Updatemapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerability where an attacker entering very large user ID or password can overrun the program’s buffer, causing undefined behaviors, such as execution of arbitrary code. No additional privilege is granted to the attacker beyond what is already possessed to run MapDrv.

The post CVE-2018-9063 appeared first on CVE Vulnerability.

]]> CVE-2018-9062 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-9062/ Sun, 26 Feb 2023 06:51:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-9062/ In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

The post CVE-2018-9062 appeared first on CVE Vulnerability.

]]> In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

The post CVE-2018-9062 appeared first on CVE Vulnerability.

]]> CVE-2018-16098 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16098/ Sun, 26 Feb 2023 06:46:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16098/ In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.

The post CVE-2018-16098 appeared first on CVE Vulnerability.

]]> In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.

The post CVE-2018-16098 appeared first on CVE Vulnerability.

]]> CVE-2018-12169 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-12169/ Sun, 26 Feb 2023 06:45:32 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-12169/ Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.

The post CVE-2018-12169 appeared first on CVE Vulnerability.

]]> Platform sample code firmware in 4th Generation Intel Core Processor, 5th Generation Intel Core Processor, 6th Generation Intel Core Processor, 7th Generation Intel Core Processor and 8th Generation Intel Core Processor contains a logic error which may allow physical attacker to potentially bypass firmware authentication.

The post CVE-2018-12169 appeared first on CVE Vulnerability.

]]> CVE-2020-8353 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8353/ Sun, 26 Feb 2023 06:43:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8353/ Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.

The post CVE-2020-8353 appeared first on CVE Vulnerability.

]]> Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.

The post CVE-2020-8353 appeared first on CVE Vulnerability.

]]> CVE-2020-8352 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8352/ Sun, 26 Feb 2023 06:43:23 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8352/ In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.

The post CVE-2020-8352 appeared first on CVE Vulnerability.

]]> In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.

The post CVE-2020-8352 appeared first on CVE Vulnerability.

]]> CVE-2020-8321 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8321/ Sun, 26 Feb 2023 06:43:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8321/ A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

The post CVE-2020-8321 appeared first on CVE Vulnerability.

]]> A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

The post CVE-2020-8321 appeared first on CVE Vulnerability.

]]> CVE-2020-8320 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-8320/ Sun, 26 Feb 2023 06:43:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-8320/ An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

The post CVE-2020-8320 appeared first on CVE Vulnerability.

]]> An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

The post CVE-2020-8320 appeared first on CVE Vulnerability.

]]>