lenovo

482 tracked vulnerabilities.

CVE-2021-3633 HIGH
Lenovo Driver Management < 2.9.0719.1104 - DLL Preloading Privilege Escalation
Aug 17, 2021
CVSS 7.3
EPSS 0.00
CVE-2021-3617 HIGH
Lenovo Smart Camera X3, X5, and C2E Firmware < 01.03.29.16 - OS Command Injection via Network Configuration
Aug 17, 2021
CVSS 7.2
EPSS 0.02
CVE-2021-3616 CRITICAL
Lenovo Smart Camera X3/X5/C2E < 01.03.29.16 - Unauthenticated Info Disclosure & Firmware Modification
Aug 17, 2021
CVSS 9.4
EPSS 0.00
CVE-2021-3615 MEDIUM
Lenovo Smart Camera X3 X5 C2E Firmware < 01.03.29.16 - Code Execution via SD Card File
Aug 17, 2021
CVSS 6.6
EPSS 0.00
CVE-2021-3614 MEDIUM
Lenovo Notebook - Privilege Escalation
Jul 16, 2021
CVSS 6.4
EPSS 0.00
CVE-2021-3550 HIGH
Lenovo PCManager <3.0.500.5102 - Privilege Escalation
Jul 16, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-3453 MEDIUM
Lenovo Notebook, ThinkPad, and Desktop Systems - BIOS Module Protection Bypass
Jul 16, 2021
CVSS 6.8
EPSS 0.00
CVE-2021-3452 MEDIUM
Lenovo BIOS - Authenticated Arbitrary Code Execution via System Shutdown SMI Callback
Jul 16, 2021
CVSS 6.7
EPSS 0.00
CVE-2021-3464 HIGH
Lenovo PCManager < 3.0.400.3252 - DLL Search Path Privilege Escalation
Apr 27, 2021
CVSS 7.8
EPSS 0.00
CVE-2021-3451 MEDIUM
Lenovo PCManager < 3.0.400.3252 - Denial of Service via Configuration File Misplacement
Apr 27, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-3473 MEDIUM
Lenovo XClarity Controller - Cleartext Transmission of Sensitive Information in FFDC Service Log
Apr 13, 2021
CVSS 4.5
EPSS 0.00
CVE-2021-3463 MEDIUM
Lenovo Power Management Driver < 1.67.17.54 - Denial of Service via Null Pointer Dereference
Apr 13, 2021
CVSS 4.2
EPSS 0.00
CVE-2021-3462 MEDIUM
Lenovo Power Management Driver < 1.67.17.54 - Privilege Escalation via Unauthorized Device Object Access
Apr 13, 2021
CVSS 5.5
EPSS 0.00
CVE-2021-3417 MEDIUM
Lenovo XClarity Orchestrator < 1.2.2 - Cleartext Transmission of Sensitive Information in FFDC Service Log
Mar 09, 2021
CVSS 4.9
EPSS 0.00
CVE-2020-8357 MEDIUM
Lenovo PCManager <3.0.200.2042 - DoS
Mar 09, 2021
CVSS 5.5
EPSS 0.00
CVE-2020-8356 MEDIUM
Lenovo XClarity Orchestrator < 1.2.2 - Cleartext Transmission of Sensitive Information in Log Files
Mar 09, 2021
CVSS 4.9
EPSS 0.00
CVE-2020-8355 MEDIUM
Lenovo XClarity Administrator <3.1.0 - Info Disclosure
Feb 10, 2021
CVSS 4.9
EPSS 0.00
CVE-2020-8351 HIGH
Lenovo PCManager <3.0.50.9162 - Privilege Escalation
Nov 30, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-8354 MEDIUM
Lenovo Notebook Firmware - Arbitrary Code Execution via VariableServiceSmm SMI Callback Race Condition
Nov 11, 2020
CVSS 6.4
EPSS 0.00
CVE-2020-8353 MEDIUM
Lenovo Desktop/Workstation - Privilege Escalation
Nov 11, 2020
CVSS 6.7
EPSS 0.00
CVE-2020-8352 LOW
Lenovo Desktop Models - BIOS Configuration Change Detection Bypass
Nov 11, 2020
CVSS 2.4
EPSS 0.00
CVE-2020-8350 HIGH
Lenovo ThinkPad Stack Wireless Router <1.1.3.4 - Privilege Escalation
Oct 14, 2020
CVSS 8.8
EPSS 0.00
CVE-2020-8349 CRITICAL
Lenovo CNOS REST API - Unauthenticated Remote Code Execution
Oct 14, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-8345 HIGH
Lenovo HardwareScan Plugin <1.0.46.11 - Privilege Escalation
Oct 14, 2020
CVSS 7.3
EPSS 0.00
CVE-2020-8338 HIGH
Lenovo Diagnostics <4.35.4 - Code Injection
Oct 14, 2020
CVSS 7.8
EPSS 0.00
Products
thinkcentre_m625q_firmware 28 ideacentre_5-14iob6_firmware 27 ideacentre_g5-14imb05_firmware 27 ideacentre_gaming_5-14iob6_firmware 27 thinkcentre_m75n_firmware 27 v50t-13imb_firmware 27 xclarity_administrator 27 ideacentre_3-07imb05_firmware 26 ideacentre_c5-14imb05_firmware 26 ideacentre_creator_5-14iob6_firmware 26 thinkcentre_m75s_gen_2_firmware 26 thinkcentre_m75t_gen_2_firmware 26 v30a-22iml_firmware 26 v50s-07imb_firmware 26 ideacentre_3-07ada05_firmware 25 ideacentre_g5-14amr05_firmware 25 legion_t7-34imz5_firmware 25 thinkcentre_m70c_firmware 25 thinkcentre_m70q_firmware 25 thinkcentre_m80q_firmware 25 thinkcentre_m80s_firmware 25 thinkcentre_m80t_firmware 25 thinkcentre_m90a_firmware 25 thinkcentre_m90q_tiny_firmware 25 thinkcentre_m90s_firmware 25 thinkedge_se30_firmware 25 v30a-24iml_firmware 25 v50a-22imb_firmware 25 v50a-24imb_firmware 25 v55t_gen_2_13acn_firmware 25
Quick Filters
Critical CVEs With Exploits In CISA KEV