İçeriğe atla
Noroxi

Lenovo kayıtları

Lenovo üreticisine ait 451 yayımlanmış kayıt. Bunların 1 tanesi sahada sömürüldü (CISA KEV listesinde), 3 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
1 · %0,2
Silahlaştırılmış
3 · %0,7
Pre-auth RCE
23
Düzeltme kaydı olan
%1,8
Yayından KEV’e ortanca
1699 gün

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

451 kayıt
  • CVE-2017-5638
    99Hemen

    The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-mes

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · struts10 Mar 2017

  • CVE-2022-3699
    40Planlayın

    A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to

    YüksekCVSS 7,8SilahlaştırılmışEPSS %4

    lenovo · diagnostics25 Eki 2023

  • CVE-2017-3761
    40Planlayın

    The Lenovo Service Framework Android application executes some system commands without proper sanitization of external input.

    KritikCVSS 9,8İstismar yokEPSS %4

    lenovo · service framework17 Eki 2017

  • CVE-2015-2219
    40Planlayın

    Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to ga

    YüksekCVSS 7,2SilahlaştırılmışEPSS %4

    lenovo · system update12 May 2015

  • CVE-2017-17833
    40Planlayın

    OpenSLP releases in the 1.0.2 and 1.1.0 code streams have a heap-related memory corruption issue which may manifest itself as a denial-of-se

    KritikCVSS 9,8İstismar yokEPSS %3

    openslp · openslp23 Nis 2018

  • CVE-2015-5684
    40Planlayın

    MITRE is populating this ID because it was assigned prior to Lenovo becoming a CNA.

    KritikCVSS 9,8İstismar yokEPSS %3

    lenovo · b50-10 firmware27 Mar 2020

  • CVE-2017-3758
    40Planlayın

    Improper access controls on several Android components in the Lenovo Service Framework application can be exploited to enable remote code ex

    KritikCVSS 9,8İstismar yokEPSS %2

    lenovo · service framework17 Eki 2017

  • CVE-2019-6168
    40Planlayın

    A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %2

    lenovo · service bridge26 Haz 2019

  • CVE-2019-6167
    40Planlayın

    A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %2

    lenovo · service bridge26 Haz 2019

  • CVE-2020-8349
    40Planlayın

    An internal security review has identified an unauthenticated remote code execution vulnerability in Cloud Networking Operating System (CNOS

    KritikCVSS 9,8İstismar yokEPSS %2

    lenovo · cloud networking operating system14 Eki 2020

  • CVE-2007-1307
    40Planlayın

    Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impa

    KritikCVSS 10,0İstismar yokEPSS %1

    intel · pro 1000 lan adapter6 Mar 2007

  • CVE-2013-1361
    39İzleyin

    Untrusted search path vulnerability in Lenovo Thinkpad Bluetooth with Enhanced Data Rate Software 6.4.0.2900 and earlier allows local users,

    KritikCVSS 9,3İstismar yokEPSS %6

    lenovo · thinkpad bluetooth with enhanced data rate software21 Oca 2014

  • CVE-2019-6188
    39İzleyin

    ThinkPad T460p and T470p BIOS Tamper Mechanism

    KritikCVSS 9,8İstismar yokEPSS %1

    lenovo · 510-15ikl firmware12 Kas 2019

  • CVE-2021-3849
    39İzleyin

    An authentication bypass vulnerability was discovered in the web interface of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Mana

    KritikCVSS 9,8İstismar yokEPSS %1

    lenovo · nextscale n1200 enclosure firmware22 Nis 2022

  • CVE-2021-3897
    39İzleyin

    An authentication bypass vulnerability was discovered in an internal service of the Lenovo Fan Power Controller2 (FPC2) and Lenovo System Ma

    KritikCVSS 9,8İstismar yokEPSS %1

    lenovo · nextscale n1200 enclosure firmware22 Nis 2022

  • CVE-2017-3774
    39İzleyin

    A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 (IMM2) earlier than ve

    KritikCVSS 9,8İstismar yokEPSS %1

    lenovo · integrated management module 219 Nis 2018

  • CVE-2018-9079
    39İzleyin

    Iomega and LenovoEMC NAS Web UI Vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %1

    lenovo · storcenter px12-450r firmware28 Eyl 2018

  • CVE-2016-8233
    39İzleyin

    Log files generated by Lenovo XClarity Administrator (LXCA) versions earlier than 1.2.2 may contain user credentials in a non-secure, clear

    KritikCVSS 9,8İstismar yokEPSS %1

    lenovo · xclarity administrator1 Mar 2017

  • CVE-2019-6177
    39İzleyin

    A vulnerability reported in Lenovo Solution Center version 03.12.003, which is no longer supported, could allow log files to be written to n

    KritikCVSS 9,8İstismar yokEPSS %1

    lenovo · solution center21 Ağu 2019

  • CVE-2021-3616
    39İzleyin

    A vulnerability was reported in Lenovo Smart Camera X3, X5, and C2E that could allow an unauthorized user to view device information, alter

    KritikCVSS 9,8İstismar yokEPSS %0

    lenovo · smart camera c2e firmware17 Ağu 2021

  • CVE-2018-14066
    39İzleyin

    The content://wappush content provider in com.android.provider.telephony, as found in some custom ROMs for Android phones, allows SQL inject

    KritikCVSS 9,8İstismar yokEPSS %0

    google · android15 Tem 2018

  • CVE-2016-1491
    36İzleyin

    The Wifi hotspot in Lenovo SHAREit before 3.2.0 for Windows, when configured to receive files, has a hardcoded password of 12345678, which m

    YüksekCVSS 8,8İstismar yokEPSS %2

    lenovo · shareit26 Oca 2016

  • CVE-2018-9066
    36İzleyin

    In Lenovo xClarity Administrator versions earlier than 2.1.0, an authenticated LXCA user can, under specific circumstances, inject additiona

    YüksekCVSS 8,8İstismar yokEPSS %2

    lenovo · xclarity administrator30 Tem 2018

  • CVE-2021-3840
    36İzleyin

    A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote co

    YüksekCVSS 8,8İstismar yokEPSS %2

    lenovo · antilles12 Kas 2021

  • CVE-2016-4782
    36İzleyin

    Lenovo SHAREit before 3.5.98_ww on Android before 4.2 allows remote attackers to have unspecified impact via a crafted intent: URL, aka an "

    YüksekCVSS 8,8İstismar yokEPSS %1

    lenovo · shareit23 May 2016