Lenovo Group Ltd. vulnerabilities
66 CVEs and advisories name Lenovo Group Ltd. as an affected vendor, newest first. Follow it as a feed.
- CVE-2018-16098In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which
- CVE-2018-9069BIOS Write Protection Race Condition
- CVE-2018-9082Iomega and LenovoEMC NAS Web UI Vulnerabilities
- CVE-2018-9081Iomega and LenovoEMC NAS Web UI Vulnerabilities
- CVE-2018-9080Iomega and LenovoEMC NAS Web UI Vulnerabilities
- CVE-2018-9079Iomega and LenovoEMC NAS Web UI Vulnerabilities
- CVE-2018-9078Iomega and LenovoEMC NAS Web UI Vulnerabilities
- CVE-2018-9077Iomega and LenovoEMC NAS Web UI Vulnerabilities
- CVE-2018-9076Iomega and LenovoEMC NAS Web UI Vulnerabilities
- CVE-2018-9075Iomega and LenovoEMC NAS Web UI Vulnerabilities
- CVE-2018-9074Iomega and LenovoEMC NAS Web UI Vulnerabilities
- CVE-2018-9066In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additiona
- CVE-2018-9065In Lenovo xClarity Administrator versions earlier than 2.1.0, an attacker that gains access to the underlying LXCA file system user may be a
- CVE-2018-9064In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user may abuse a web API debug call to retrieve the cred
- CVE-2018-9068The IMM2 First Failure Data Capture function collects management module logs and diagnostic information when a hardware error is detected.
- CVE-2018-9062BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack
- CVE-2018-9070For the Lenovo Smart Assistant Android app versions earlier than 12.1.82, an attacker with physical access to the smart speaker can, by pres
- CVE-2018-9067The Lenovo Help Android app versions earlier than 6.1.2.0327 had insufficient access control for some functions which, if exploited, could h
- CVE-2018-9063MapDrv (C:\Program Files\Lenovo\System Update\mapdrv.exe) In Lenovo System Update versions earlier than 5.07.0072 contains a local vulnerabi
- CVE-2017-3775Some Lenovo System x server BIOS/UEFI versions, when Secure Boot mode is enabled by a system administrator, do not properly authenticate sig
- CVE-2017-3776Lenovo Help Android mobile app versions earlier than 6.1.2.0327 allowed information to be transmitted over an HTTP channel, permitting other
- CVE-2017-3774A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than ve
- CVE-2017-3768An unprivileged attacker with connectivity to the IMM2 could cause a denial of service attack on the IMM2 (Versions earlier than 4.4 for Len
- CVE-2017-3762Sensitive data stored by Lenovo Fingerprint Manager Pro, version 8.01.86 and earlier, including users' Windows logon credentials and fingerp
- CVE-2017-3765In Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "H
- CVE-2017-3764A vulnerability was identified in Lenovo XClarity Administrator (LXCA) before 1.4.0 where LXCA user account names may be exposed to unauthen
- CVE-2017-3767A local privilege escalation vulnerability was identified in the Realtek audio driver versions prior to 6.0.1.8224 in some Lenovo ThinkPad p
- CVE-2017-3771System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without co
- CVE-2017-3761The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input.
- CVE-2017-3760The Lenovo Service Framework Android application uses a set of nonsecure credentials when performing integrity verification of downloaded ap