lenovo Vulnerability Advisory Catalog

Total 374 security vulnerabilities recorded for lenovo software and firmware.

← Back to All Vendors
Component: gm265dn_firmware

Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate wit...

๐Ÿ“… 2023-10-27
CVSS 4.3 Dossier →
Component: gm265dn_firmware

A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal ...

๐Ÿ“… 2023-10-27
CVSS 8.8 Dossier →
CVE-2023-4608 MEDIUM
Component: thinkagile_hx5530_firmware

An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command.ย  This affects Thin...

๐Ÿ“… 2023-10-25
CVSS 4.1 Dossier →
Component: thinkagile_hx5530_firmware

An authenticated XCC user can change permissions for any user through a crafted API command....

๐Ÿ“… 2023-10-25
CVSS 7.5 Dossier →
Component: thinkagile_hx5530_firmware

An authenticated XCC user with Read-Only permission can change a different userโ€™s password through a crafted API command.ย ย  This affects ThinkSystem ...

๐Ÿ“… 2023-10-25
CVSS 8.1 Dossier →
Component: diagnostics

A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to versionย 1.3.1.2 andย Lenovo Diagnostics prior to version 4...

๐Ÿ“… 2023-10-25
CVSS 7.8 Dossier →
CVE-2022-3698 MEDIUM
Component: diagnostics

A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 andย  Lenovo Diagnostics versions prior...

๐Ÿ“… 2023-10-25
CVSS 4.4 Dossier →
CVE-2022-0353 MEDIUM
Component: diagnostics

A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 andย  Lenovo Diagnostics versions prior...

๐Ÿ“… 2023-10-25
CVSS 4.4 Dossier →
Component: thinkpad_t14s_gen_3_firmware

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific c...

๐Ÿ“… 2023-10-09
CVSS 6.1 Dossier →
Component: thinkpad_t14s_gen_3_firmware

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific c...

๐Ÿ“… 2023-10-09
CVSS 6.1 Dossier →
CVE-2022-3728 MEDIUM
Component: thinkpad_t14s_gen_3_firmware

A vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific c...

๐Ÿ“… 2023-10-09
CVSS 6.1 Dossier →
CVE-2022-3431 MEDIUM
Component: ideapad_creator_5-16ach6_firmware

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated m...

๐Ÿ“… 2023-10-09
CVSS 6.7 Dossier →
CVE-2022-3746 MEDIUM
Component: ideapad_1_14iau7_firmware

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privile...

๐Ÿ“… 2023-08-23
CVSS 6.7 Dossier →
CVE-2022-3745 MEDIUM
Component: ideapad_1_14iau7_firmware

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privile...

๐Ÿ“… 2023-08-23
CVSS 4.4 Dossier →
CVE-2022-3744 MEDIUM
Component: ideapad_1_14iau7_firmware

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privile...

๐Ÿ“… 2023-08-23
CVSS 6.7 Dossier →
CVE-2022-3743 MEDIUM
Component: ideapad_1_14iau7_firmware

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privile...

๐Ÿ“… 2023-08-23
CVSS 4.4 Dossier →
CVE-2022-3742 MEDIUM
Component: ideapad_1_14iau7_firmware

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privile...

๐Ÿ“… 2023-08-23
CVSS 6.7 Dossier →
Component: thinkpad_t15_gen_2_firmware

A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure ...

๐Ÿ“… 2023-08-17
CVSS 8.4 Dossier →
CVE-2023-4029 MEDIUM
Component: k14_type_21cu_firmware

A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access ...

๐Ÿ“… 2023-08-17
CVSS 6.7 Dossier →
CVE-2023-4028 MEDIUM
Component: 13w_yoga_firmware

A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local ...

๐Ÿ“… 2023-08-17
CVSS 6.7 Dossier →
Component: universal_device_client

An uncontrolled search path vulnerability was reported in the Lenovo Universal Device Client (UDC) that could allow an attacker with local access to e...

๐Ÿ“… 2023-08-17
CVSS 7.8 Dossier →
Component: legion_5_pro_16iah7h_firmware

A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and el...

๐Ÿ“… 2023-08-17
CVSS 6.7 Dossier →
Component: xclarity_administrator

An unauthenticated XML external entity injection (XXE) vulnerability exists in LXCA's Common Information Model (CIM) server that could result in read-...

๐Ÿ“… 2023-06-26
CVSS 8.2 Dossier →
Component: xclarity_administrator

A valid, authenticated LXCA user with elevated privileges may be able to delete folders in the LXCA filesystem through a specifically crafted web API ...

๐Ÿ“… 2023-06-26
CVSS 6.5 Dossier →
Page 4 of 16 (374 Total Records)