Lenovo Group Ltd. vulnerabilities, page 4
65 vulnerabilities
Known vulnerabilities in Lenovo Group Ltd. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 46 products.
CVE-2017-3765lenovo group ltd.enterprise network operating system affecting lenovo and ibm rackswitch and bladecenter products+1
EPSS score0.27%
In Enterprise Networking Operating System (ENOS) in Lenovo and IBM RackSwitch and BladeCenter products, an authentication bypass known as "HP Backdoor" was discovered during a Lenovo security audit in the serial console, Telnet, SSH, and Web interfaces. This bypass mechanism can be accessed when performing local authentication under specific circumstances. If exploited, admin-level access to the switch is granted.CVE-2017-3744ibmintegrated_management_module_firmware+2EPSS score0.84%
In the IMM2 firmware of Lenovo System x servers, remote commands issued by LXCA or other utilities may be captured in the First Failure Data Capture (FFDC) service log if the service log is generated when that remote command is running. Captured command data may contain clear text login information. Authorized users that can capture and export FFDC service log data may have access to these remote commands.CVE-2017-3752ibm1g_l2-7_slb+24EPSS score0.44%
An industry-wide vulnerability has been identified in the implementation of the Open Shortest Path First (OSPF) routing protocol used on some Lenovo switches. Exploitation of these implementation flaws may result in attackers being able to erase or alter the routing tables of one or many routers, switches, or other devices that support OSPF within a routing domain.CVE-2017-3771lenovo group ltd.e95, thinkcentre m710s/m710t+3EPSS score0.82%
System boot process is not adequately secured In Lenovo E95 and ThinkCentre M710s/M710t because systems were shipped from factory without completing BIOS/UEFI initialization process.CVE-2017-3741lenovo group ltd.power management driver+1EPSS score0.26%
In the Lenovo Power Management driver before 1.67.12.24, a local user may alter the trackpoint's firmware and stop the trackpoint from functioning correctly. This issue only affects ThinkPad X1 Carbon 5th generation.