Skip to contentLenovo Group Ltd. vulnerabilities
Newest
- lenovo synaptics thinkpad ultranav driver, thiankpad l430 firmware, thiankpad l530 firmware +57 more +59 moreIn some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of...CVE-2018-160987.8 High
- lenovo xclarity administratorIn Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can,...CVE-2018-90668.8 High
- lenovo xclarity administratorIn Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to...CVE-2018-90657.5 High
- lenovo xclarity administratorIn Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may...CVE-2018-90648.8 High
- ibm bladecenter hs22 firmware, bladecenter hs23 firmware, bladecenter hs23e firmware +35 more +37 moreThe IMM2 First Failure Data Capture function collects management module logs and diagnostic...CVE-2018-90687.5 High
- lenovo e42-80 firmware, e42-80 isk firmware, e52-80 firmware +37 more +39 moreBIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical AttackCVE-2018-90626.8 Medium
- lenovo smart assistantFor the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with...CVE-2018-90706.4 Medium
- lenovo help, lenovo group ltd. help android application +1 moreThe Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for...CVE-2018-90677.5 High
- lenovo system updateMapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions...CVE-2018-90637.8 High
- lenovo flex system x240 m5 bios, flex system x280 x6 bios, flex system x480 x6 bios +9 more +11 moreSome Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system...CVE-2017-37756.4 Medium
- lenovo help, lenovo group ltd. help mobile android app +1 moreLenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be...CVE-2017-37767.5 High
- ibm imm2, lenovo integrated management module 2 +1 moreA stack overflow vulnerability was discovered within the web administration service in Integrated...CVE-2017-37749.8 Critical
- ibm bladecenter hs22 firmware, bladecenter hs23 firmware, bladecenter hs23e firmware +35 more +37 moreAn unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on...CVE-2017-37687.5 High
- lenovo fingerprint manager proSensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including...CVE-2017-37627.8 High
- lenovo enterprise network operating system, lenovo group ltd. enterprise network operating system affecting lenovo and ibm rackswitch and bladecenter products +1 moreIn Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter...CVE-2017-37657.0 High
- lenovo xclarity administratorA vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA...CVE-2017-37645.3 Medium
- lenovo group ltd. realtek audio driver, realtek audio driver firmware +1 moreA local privilege escalation vulnerability was identified in the Realtek audio driver versions...CVE-2017-37677.8 High
- lenovo aio e95 firmware, thinkcentre m710s firmware, thinkcentre m710t firmware +1 more +3 moreSystem boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because...CVE-2017-37717.5 High
- lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application executes some system commands without proper...CVE-2017-37619.8 Critical
- lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application uses a set of nonsecure credentials when...CVE-2017-37608.1 High
- lenovo service framework, lenovo group ltd. service framework application +1 moreThe Lenovo Service Framework Android application accepts some responses from the server without...CVE-2017-37598.1 High
- lenovo service framework, lenovo group ltd. service framework application +1 moreImproper access controls on several Android components in the Lenovo Service Framework...CVE-2017-37589.8 Critical
- lenovo xclarity administrator, lenovo group ltd. xclarity administrator (lxca) +1 morePrivilege escalation vulnerability in LXCA versions earlier than 1.3.2 where an authenticated...CVE-2017-37708.8 High
- lenovo xclarity administrator, lenovo group ltd. xclarity administrator (lxca) +1 moreAn attacker who obtains access to the location where the LXCA file system is stored may be able...CVE-2017-37636.7 Medium
- emc elan touchpad driver, lenovo group ltd. elantech touchpad driver +1 moreAn unquoted service path vulnerability was identified in the driver for the ElanTech Touchpad,...CVE-2017-37577.8 High
- lenovo thinkpad usb 3.0 ethernet adapter driverThinkPad USB 3.0 Ethernet Adapter (part number 4X90E51405) driver, various versions, was found to...CVE-2017-37467.8 High
- lenovo thinkpad 10 ella 2, thinkpad 10 ella 2 bios, thinkpad 11e beema +146 more +148 moreA privilege escalation vulnerability was identified in Lenovo Active Protection System for...CVE-2017-37567.8 High
- lenovo 63 firmware, h50-30g firmware, ideacentre 300-20ish firmware +109 more +111 moreA vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed...CVE-2017-37536.8 Medium
- lenovo thinkpad compact usb keyboard driver, lenovo group ltd. thinkpad compact usb keyboard with trackpoint driver +1 moreAn unquoted service path vulnerability was identified in the driver for the ThinkPad Compact USB...CVE-2017-37517.8 High
- ibm 1\, 1g l2-7 slb, en2092 1gb firmware +17 more +19 moreAn industry-wide vulnerability has been identified in the implementation of the Open Shortest...CVE-2017-37528.2 High
- lenovo bios, lenovo group ltd. notebook bios +1 moreSome Lenovo brand notebook systems do not have write protections properly configured in the...CVE-2017-37546.7 Medium
- lenovo connect2In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when...CVE-2017-37424.8 Medium
- google android, lenovo group ltd. vibe and lenovo china-only moto mobile phones +1 moreOn Lenovo VIBE mobile phones, the Lenovo Security Android application allows private data to be...CVE-2017-3750Fix available6.4 Medium
- google android, lenovo group ltd. vibe and lenovo china-only moto mobile phones +1 moreOn Lenovo VIBE mobile phones, the Idea Friend Android application allows private data to be...CVE-2017-37496.4 Medium
- google android, lenovo group ltd. vibe and lenovo china-only moto mobile phones +1 moreOn Lenovo VIBE mobile phones, improper access controls on the nac_server component can be abused...CVE-2017-37487.8 High
- lenovo nerve centerPrivilege escalation vulnerability in Lenovo Nerve Center for Windows 10 on Desktop systems ...CVE-2017-37475.5 Medium
- lenovo xclarity administratorIn Lenovo XClarity Administrator (LXCA) before 1.3.0, if service data is downloaded from LXCA, a...CVE-2017-37457.8 High
- ibm integrated management module firmware, lenovo group ltd. system x imm2 +1 moreIn the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other...CVE-2017-37446.5 Medium
- lenovo advanced settings utility, updatexpress system pack installer, lenovo group ltd. toolscenter +1 more +3 moreIf multiple users are concurrently logged into a single system where one user is sending a...CVE-2017-37437.5 High
- lenovo power management driver, power management +1 moreIn the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's...CVE-2017-37413.3 Low
- lenovo active protection systemIn Lenovo Active Protection System before 1.82.0.14, an attacker with local privileges could send...CVE-2017-37405.5 Medium
- lenovo service bridgeIn Lenovo Service Bridge before version 4, a bug found in the signature verification logic of the...CVE-2016-82317.5 High
- lenovo service bridgeIn Lenovo Service Bridge before version 4, an insecure HTTP connection is used by LSB to send...CVE-2016-82307.5 High
- lenovo service bridgeA cross-site request forgery vulnerability in Lenovo Service Bridge before version 4 could be...CVE-2016-82298.8 High
- lenovo service bridgeIn Lenovo Service Bridge before version 4, a user with local privileges on a system could execute...CVE-2016-82287.8 High
- lenovo updatesRemote code execution in Lenovo Updates (not Lenovo System Update) allows man-in-the-middle...CVE-2016-82378.1 High
- lenovo customer care software development kit, lenovo group ltd. customer care software development kit (ccsdk) +1 morePrivilege escalation in Lenovo Customer Care Software Development Kit (CCSDK) versions earlier...CVE-2016-82357.8 High
- lenovo thinkserver firmware, lenovo group ltd. thinkserver rd350, rd450, rd550, rd650, td350 +1 moreReset to default settings may occur in Lenovo ThinkServer TSM RD350, RD450, RD550, RD650, TD350...CVE-2016-82367.5 High
- lenovo xclarity administratorLog files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 may...CVE-2016-82339.8 Critical
- lenovo transition, lenovo group ltd. transition application +1 morePrivilege escalation vulnerability in Lenovo Transition application used in Lenovo Yoga, Flex and...CVE-2016-82277.8 High
- Show moreLoading…