Lenovo

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-43569 1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more Jun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43568 1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more Jun 17, 2026 Nov 8, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
CVE-2023-43567 1Lenovo 111Ideacentre 3 07ada05 Firmware Ideacentre 3 07imb05 FirmwareIdeacentre 5 14acn6 Firmware+108 more Jun 17, 2026 Nov 8, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2022-4575 1Lenovo 13Thinkpad 25 Firmware Thinkpad L560 FirmwareThinkpad P50 Firmware+10 more Jun 17, 2026 Oct 30, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Sec...Show more A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot. Show less
CVE-2022-4574 1Lenovo 54Thinkpad L14 Firmware Thinkpad L14 Gen 2 FirmwareThinkpad L15 Firmware+51 more Jun 17, 2026 Oct 30, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2022-4573 1Lenovo 1Thinkpad X1 Fold Gen 1 Firmware Jun 17, 2026 Oct 30, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2022-48189 1Lenovo 85Thinkpad E14 Firmware Thinkpad E14 Gen 2 FirmwareThinkpad E14 Gen 4 Firmware+82 more Jun 17, 2026 Oct 30, 2023 N/A· v4 6.7 MEDIUM· v3 N/A· v2 An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2022-3702 1Lenovo 3Hardware Scan Addin Hardware Scan PluginSystem Update Plugin Jun 17, 2026 Oct 27, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 A denial of service vulnerability was reported in Lenovo Vantage HardwareScan Plugin version 1.3.0.5 and earlier that could allow a local attacker to delete contents of an arbitrary directory under certain conditions.
CVE-2022-3701 1Lenovo 3Hardware Scan Addin Hardware Scan PluginSystem Update Plugin Jun 17, 2026 Oct 27, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges.
CVE-2022-3700 1Lenovo 3Hardware Scan Addin Hardware Scan PluginSystem Update Plugin Jun 17, 2026 Oct 27, 2023 N/A· v4 6.3 MEDIUM· v3 N/A· v2 A Time of Check Time of Use (TOCTOU) vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files.
CVE-2022-3611 1Lenovo 1App Store App Jun 17, 2026 Oct 27, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 An information disclosure vulnerability has been identified in the Lenovo App Store which may allow some applications to gain unauthorized access to sensitive user data used by other unrelated applications.
CVE-2022-3429 1Lenovo 3G263dns Firmware Gm265dn FirmwareGm266dns Firmware Jun 17, 2026 Oct 27, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents...Show more A denial-of-service vulnerability was found in the firmware used in Lenovo printers, where users send illegal or malformed strings to an open port, triggering a denial of service that causes a display error and prevents the printer from functioning properly.Show less
CVE-2022-34887 1Lenovo 3G263dns Firmware Gm265dn FirmwareGm266dns Firmware Jun 17, 2026 Oct 27, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Standard users can directly operate and set printer configuration information , such as IP, in some Lenovo Printers without having to authenticate with the administrator password.
CVE-2022-34886 1Lenovo 3G263dns Firmware Gm265dn FirmwareGm266dns Firmware Jun 17, 2026 Oct 27, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack...Show more A remote code execution vulnerability was found in the firmware used in some Lenovo printers, which can be caused by a remote user pushing an illegal string to the server-side interface via a script, resulting in a stack overflow.Show less
CVE-2023-4608 1Lenovo 58Thinkagile Hx1331 Firmware Thinkagile Hx2330 FirmwareThinkagile Hx2331 Firmware+55 more Jun 17, 2026 Oct 25, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not aff...Show more An authenticated XCC user with elevated privileges can perform blind SQL injection in limited cases through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.Show less
CVE-2023-4607 1Lenovo 123Thinkagile Hx1021 Edg Firmware Thinkagile Hx1320 FirmwareThinkagile Hx1321 Firmware+120 more Jun 17, 2026 Oct 25, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 An authenticated XCC user can change permissions for any user through a crafted API command.
CVE-2023-4606 1Lenovo 58Thinkagile Hx1331 Firmware Thinkagile Hx2330 FirmwareThinkagile Hx2331 Firmware+55 more Jun 17, 2026 Oct 25, 2023 N/A· v4 8.1 HIGH· v3 N/A· v2 An authenticated XCC user with Read-Only permission can change a different user’s password through a crafted API command. This affects ThinkSystem v2 and v3 servers with XCC; ThinkSystem v1 servers are not affected.
CVE-2022-3699 1Lenovo 3Diagnostics Hardwarescan AddinHardwarescan Plugin Jun 17, 2026 Oct 25, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 that could allow a local user to execute code with elevated pr...Show more A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 that could allow a local user to execute code with elevated privileges.Show less
CVE-2022-3698 1Lenovo 2Diagnostics Hardwarescan Plugin Jun 17, 2026 Oct 25, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to...Show more A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash. Show less
CVE-2022-0353 1Lenovo 3Diagnostics Hardwarescan AddinHardwarescan Plugin Jun 17, 2026 Oct 25, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to...Show more A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash. Show less

Previous 1 2 345...20 Next