Lenovo Schwachstellen

Zeitverlauf

Typ

Produkt

Lenovo XClarity Administrator23
Lenovo ThinkPad22
Lenovo Notebook20
Lenovo Desktop BIOS16
Lenovo XClarity Controller13

Massnahmen

Official Fix153
Temporary Fix0
Workaround2
Unavailable4
Not Defined186

Ausnutzbarkeit

High1
Functional1
Proof-of-Concept8
Unproven1
Not Defined334

Zugriffsart

Not Defined0
Physical25
Local160
Adjacent15
Network145

Authentisierung

Not Defined0
High92
Low136
None117

Benutzeraktivität

Not Defined0
Required43
None302

C3BM Index

CVSSv3 Base

≤10
≤21
≤34
≤418
≤533
≤670
≤7136
≤860
≤918
≤105

CVSSv3 Temp

≤10
≤21
≤34
≤421
≤537
≤669
≤7139
≤856
≤915
≤103

VulDB

≤10
≤21
≤314
≤430
≤554
≤672
≤796
≤862
≤911
≤105

NVD

≤10
≤20
≤31
≤42
≤519
≤620
≤745
≤866
≤924
≤1011

CNA

≤10
≤21
≤31
≤41
≤525
≤616
≤788
≤832
≤913
≤102

Hersteller

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k92
<2k182
<5k69
<10k0
<25k1
<50k1
<100k0
≥100k0

Exploit heute

<1k303
<2k38
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (166): 1 Preload Directory (1), Accelerator Application (1), Access Support (3), Active Protection System (2), Antilles (1), App Store (1), App Store App (1), BIOS (10), BIOS EFI Driver (1), Backup (1), Backup Center (1), Baiying (1), Bootable Generator (1), Browser HD (1), Browser Mobile (1), Chassis Management Module (2), Cloud Networking Operating System (1), Connect2 (1), Customer Care Software Development Kit (1), Desktop (9), Desktop - All in One (1), Desktop BIOS (16), Device Help (1), Diagnostics (4), Driver Management (1), Drivers Management (3), Dynamic Power Reduction Utility (1), Dynamic System Analysis (1), E95 (1), EZ Media (1), Edge (1), Energy Management Driver (1), Enterprise Network Disk (2), FPC (4), Fan Power Controller2 (2), Fingerprint Manager (3), HardwareScan Plugin (4), Help Android Mobile App (1), Help App (1), IBM BladeCenter (1), IBM BladeCenter Advanced Management Module (1), IdeaPad (1), IdeaPad Duet 3-10IGL5 (1), Ideapad Y700-14ISK (1), Installation Package (2), Integrated Management Module 2 (1), LCFC BIOS (5), LXCO (2), LeCloud Application (1), Legion Phone2 Pro (1), Legion Phone Pro (1), LenovoEMC EZ Media (1), LenovoEMC NAS (1), Leyun Cloud Music Application (1), M710s (1), M710t (1), Mouse Suite (1), NAS (9), Nerve Center (1), Notebook (20), Notebook BIOS (1), PC (1), PCManager (9), PaperDisplay Hotkey Service (1), Paper software (1), Personal Cloud Storage (5), Power Management Driver (4), Printer (5), Printer G263DNS (3), Printer GM265DN (6), Printer GM266DNS (3), Printer LJ4010DN (2), Product (1), Ready For (1), Resuce And Recovery (1), SHAREit (6), SMM (4), SMM2 (4), Safecenter (1), Service Bridge (8), Service Framework (4), Slim USB Keyboard Driver (1), Smart Assistant (1), Smart Camera C2E (3), Smart Camera X3 (3), Smart Camera X5 (3), Smart Clock Essential (1), Smart Edge BIOS (1), Smart Standby Driver (1), Software Update (1), Solution Center (4), Switch (1), Synaptics Fingerprint Readers (1), System (1), System Interface Foundation (10), System Management Module (10), System Update (12), System X (3), System X6 (1), System X M5 (1), System X M6 (1), System X Server (1), System X Server BIOS (1), System x IMM2 (1), Tab M8 HD (1), Tablet (1), Thin Installer (1), ThinkAgile (2), ThinkCentre (2), ThinkEdge (2), ThinkPad (22), ThinkPad A275 (1), ThinkPad A285 (2), ThinkPad A475 (1), ThinkPad A485 (2), ThinkPad BIOS (4), ThinkPad P14s (1), ThinkPad P15s (1), ThinkPad T13 Gen3 (3), ThinkPad T14 (1), ThinkPad T14 Gen 3 (1), ThinkPad T14s Gen3 (3), ThinkPad T15 (1), ThinkPad T495 (2), ThinkPad T495s (2), ThinkPad X1 Fold (1), ThinkPad X1 Fold Gen 1 (1), ThinkPadX13s (4), ThinkPad X395 (2), ThinkServer (3), ThinkServer RD350 (1), ThinkServer RD450 (1), ThinkServer RD550 (1), ThinkServer RD650 (1), ThinkServer System Manager (2), ThinkServer TD350 (1), ThinkServer TSM (1), ThinkStation (9), ThinkStation BIOS (1), ThinkSystem (4), ThinkSystem SR670 V2 (1), Thinkpad Bluetooth with Enhanced Data Rate Software (1), Thinkvantage System Update (1), ToolsCenter Advanced Settings Utility (1), Touch Fingerprint (1), Transition Application (1), USB Enhanced Performance Keyboard (1), Ultraslim Dongle (1), Universal Device Client (2), UpdateXpress System Pack Installer (1), Updates (1), VIBE Mobile Phone (3), Vantage (3), Vantage HardwareScan Plugin (1), Vantage SystemUpdate Plugin (2), Veriface (1), View Driver (1), Windows 7 PC Preload (2), Windows 8 PC Preload (2), Workstation (1), XClarity Administrator (23), XClarity Controller (13), XClarity Integrator (1), X Server (1), ix2 (1), ix2-dl (1)

Link to Vendor Website: https://www.lenovo.com/

VeröffentlichtBaseTempSchwachstelleProdAusMasEPSSCTICVE
15.04.20248.88.8Lenovo SMM/SMM2/FPC API Endpoint erweiterte RechteUnbekanntNot DefinedNot Defined0.000520.00CVE-2023-4856
15.04.20247.27.2Lenovo SMM/SMM2/FPC IPMI erweiterte RechteUnbekanntNot DefinedNot Defined0.000520.04CVE-2023-4855
15.04.20246.76.7Lenovo Windows 7 PC Preload/Windows 8 PC Preload System Recovery Bootloader Local Privilege EscalationUnbekanntNot DefinedNot Defined0.000430.00CVE-2024-23593
15.04.20247.27.2Lenovo SMM/SMM2/FPC erweiterte RechteUnbekanntNot DefinedNot Defined0.000520.08CVE-2024-2659
15.04.20246.46.4Lenovo Windows 7 PC Preload/Windows 8 PC Preload System Recovery Bootloader PufferüberlaufUnbekanntNot DefinedNot Defined0.000430.04CVE-2024-23594
15.04.20246.46.4Lenovo SMM/SMM2/FPC schwache AuthentisierungUnbekanntNot DefinedNot Defined0.000870.04CVE-2023-4857
06.04.20246.76.7Lenovo Notebook BIOS NVRAM PufferüberlaufUnbekanntNot DefinedNot Defined0.000430.06CVE-2023-5912
06.04.20247.57.5Lenovo Printer LPD Packet Denial of ServicePrinting SoftwareNot DefinedNot Defined0.000460.03CVE-2024-27912
06.04.20246.46.4Lenovo Printer Administrator Password erweiterte RechtePrinting SoftwareNot DefinedNot Defined0.000870.02CVE-2024-27911
06.04.20245.35.3Lenovo Printer erweiterte RechtePrinting SoftwareNot DefinedNot Defined0.000430.02CVE-2024-27910
06.04.20244.94.9Lenovo Printer HTTPS Service Denial of ServicePrinting SoftwareNot DefinedNot Defined0.000440.00CVE-2024-27909
06.04.20244.94.9Lenovo Printer HTTPS Service PufferüberlaufPrinting SoftwareNot DefinedNot Defined0.000440.02CVE-2024-27908
06.04.20245.95.8Lenovo XClarity Administrator API Endpoint Information DisclosureUnbekanntNot DefinedOfficial Fix0.000460.02CVE-2023-4605
06.04.20246.36.3Lenovo Synaptics Fingerprint Readers erweiterte RechteUnbekanntNot DefinedNot Defined0.000530.00CVE-2024-23592
06.04.20246.76.7Lenovo Desktop BIOS/Smart Edge BIOS/ThinkStation BIOS NVRAM Information DisclosureUnbekanntNot DefinedNot Defined0.000430.00CVE-2023-25494
06.04.20246.76.5Lenovo BIOS Local Privilege EscalationUnbekanntNot DefinedOfficial Fix0.000430.02CVE-2023-25493
16.02.20242.01.9Lenovo ThinkSystem SR670 V2 Intel Boot Guard/SPS security unbekannte SchwachstelleUnbekanntNot DefinedOfficial Fix0.000430.05CVE-2024-23591
20.01.20245.55.4Lenovo App Store App Denial of ServiceUnbekanntNot DefinedOfficial Fix0.000430.04CVE-2023-6450
20.01.20243.33.3Lenovo Tab M8 HD Device Identifier Information DisclosureUnbekanntNot DefinedNot Defined0.000430.02CVE-2023-5081
20.01.20246.56.4Lenovo Vantage Service schwache AuthentisierungUnbekanntNot DefinedOfficial Fix0.000550.00CVE-2023-6044
20.01.20247.87.6Lenovo Vantage schwache AuthentisierungUnbekanntNot DefinedOfficial Fix0.000420.05CVE-2023-6043
20.01.20246.66.6Lenovo Tablet Device Identifier erweiterte RechteTablet Operating SystemNot DefinedNot Defined0.000430.00CVE-2023-5080
03.01.20246.16.0Lenovo Browser Mobile/Browser HD erweiterte RechteAndroid App SoftwareNot DefinedOfficial Fix0.000640.00CVE-2023-6540
03.01.20247.87.6Lenovo Universal Device Client erweiterte RechteUnbekanntNot DefinedOfficial Fix0.000420.02CVE-2023-6338
09.11.20236.76.5Lenovo IdeaPad Duet 3-10IGL5 FmpSipoCapsuleDriver Driver PufferüberlaufUnbekanntNot DefinedOfficial Fix0.000420.05CVE-2023-5075

320 weitere Einträge werden nicht mehr angezeigt

Do you know our Splunk app?

Download it now for free!