Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

lenovo updates - vulnerabilities and exploits

(subscribe to this query)
8.1
CVSSv3
CVE-2016-8237
Remote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle malicious users to execute arbitrary code.
Lenovo Updates -
7.8
CVSSv3
CVE-2022-1892
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Lenovo 100e 2nd Gen FirmwareLenovo 100w Gen 3 FirmwareLenovo 13w Yoga FirmwareLenovo 14w Gen 2 FirmwareLenovo 300e 2nd Gen FirmwareLenovo 300w Gen 3 FirmwareLenovo 500w Gen 3 FirmwareLenovo 730s-13iml FirmwareLenovo Flex 3-11ada05 FirmwareLenovo Flex 5-14alc05 FirmwareLenovo Flex 5-14are05 FirmwareLenovo Flex 5-14iil05 FirmwareLenovo Flex 5-14itl05 FirmwareLenovo Flex 5-15alc05 FirmwareLenovo Flex 5-15iil05 FirmwareLenovo Flex 5-15itl05 FirmwareLenovo Ideapad 1-11ada05 FirmwareLenovo Ideapad 1-11igl05 FirmwareLenovo Ideapad 1-14ada05 FirmwareLenovo Ideapad 1-14igl05 FirmwareLenovo Ideapad 3-15ada05 FirmwareLenovo Ideapad 3-14ada05 Firmware
7.8
CVSSv3
CVE-2022-1891
A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Lenovo Thinkbook 14-iml FirmwareLenovo Thinkbook 14-iil FirmwareLenovo Thinkbook 15-iil FirmwareLenovo Thinkbook 15-iml FirmwareLenovo Yoga C640-13iml Lte FirmwareLenovo Yoga C640-13iml Firmware
7.8
CVSSv3
CVE-2022-1890
A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
Lenovo Thinkbook 14-iml FirmwareLenovo Thinkbook 14-iil FirmwareLenovo Thinkbook 15-iil FirmwareLenovo Thinkbook 15-iml FirmwareLenovo Yoga C640-13iml Lte FirmwareLenovo Yoga C640-13iml Firmware
7.3
CVSSv3
CVE-2019-0164
Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
Intel Turbo Boost Max Technology 3.0Lenovo Thinkstation P410 Firmware -Lenovo Thinkstation P510 Firmware -Lenovo Thinkstation P710 Firmware -Lenovo Thinkstation P910 Firmware -
6.5
CVSSv3
CVE-2018-9084
In System Management Module (SMM) versions before 1.06, if an attacker manages to log in to the device OS, the validation of software updates can be circumvented.
Lenovo System Management Module Firmware
4.9
CVSSv3
CVE-2020-8355
An internal product security audit of Lenovo XClarity Administrator (LXCA) prior to version 3.1.0 discovered the Windows OS credentials provided by the LXCA user to perform driver updates of managed systems may be captured in the First Failure Data Capture (FFDC) service log if t...
Lenovo Xclarity Administrator
6
CVSSv3
CVE-2019-19756
An internal product security audit of Lenovo XClarity Administrator (LXCA) discovered Windows OS credentials, used to perform driver updates of managed systems, being written to a log file in clear text. This only affects LXCA version 2.6.0 when performing a Windows driver update...
Lenovo Xclarity Administrator 2.6.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693CVE-2024-30851CVE-2024-34460CVE-2024-2887localCVE-2024-27956remote code executionCVE-2024-34475privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook