目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1359 元

100%
请我们喝杯咖啡

CVE-2025-10237— Lenovo ThinkPad 加密问题漏洞

一分钟漏洞结论

影响对象
Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

Lenovo ThinkPad是中国联想（Lenovo）公司的一个便携式计算机。 Lenovo ThinkPad存在加密问题漏洞，该漏洞源于嵌入式控制器固件问题，可能导致具有特权的本地用户对特权内存区域执行任意读写。

CVSS 6.7 · Medium EPSS 0.08% · P0

影响版本矩阵 95

厂商产品 版本范围状态
Lenovo L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS < 1.45 affected
Lenovo L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS < 1.10 affected
Lenovo L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS < 1.24 affected
Lenovo L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS < 1.21 affected
Lenovo L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS < 1.15 affected
Lenovo L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS < 1.31 affected
Lenovo L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS < 1.36 affected
Lenovo L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS < 1.73 affected
Lenovo L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS < 1.44 affected
Lenovo L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS < 1.36 affected
Lenovo L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS < 1.34 affected
Lenovo L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS < 1.27 affected
Lenovo L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS < 1.06 affected
Lenovo L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS < 1.14 affected
Lenovo L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS < 1.27 affected
Lenovo L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS < 1.40 affected
Lenovo L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS < 1.13 affected
Lenovo L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS < 1.53 affected
Lenovo P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS < 1.30 / 1.15 affected
Lenovo P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS < 1.39 / 1.15 affected
Lenovo P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS < 1.18 / 1.14 affected
Lenovo P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS < 1.33 affected
Lenovo P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS < 1.47 affected
Lenovo P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS < 1.26 affected
Lenovo P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS < 1.17 affected
Lenovo P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS < UEFI BIOS V1.22/ECP V1.13 affected
Lenovo P15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOS ≤ 1.28 affected
Lenovo P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOS ≤ 1.70 affected
Lenovo P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS < BIOS: 1.99/ ECFW: 1.58 affected
Lenovo P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS < 1.52 affected
Lenovo P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS < BIOS: 1.66 / ECFW: 1.10 affected
Lenovo P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS < 1.65/1.13 affected
Lenovo P16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOS ≤ 1.20 affected
Lenovo P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS ≤ 1.16 affected
Lenovo P17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOS ≤ 1.98 affected
Lenovo P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS ≤ 2.01 affected
Lenovo S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS < 1.28 affected
Lenovo T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS < 1.47/1.27 affected
Lenovo T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS < 1.18 affected
Lenovo T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS < 1.38 affected
Lenovo T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS < 1.49 affected
Lenovo T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS < 1.51 affected
Lenovo T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS < 1.23 affected
Lenovo T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS < 1.28 affected
Lenovo T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS < 1.15 affected
Lenovo T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS < 1.62/1.12 affected
Lenovo T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS < 1.10 affected
Lenovo T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS < 1.09 affected
Lenovo T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS < 1.11 affected
Lenovo T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS ≤ 1.34 affected
Lenovo T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS < 1.69/1.21 affected
Lenovo T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS ≤ 1.98 affected
Lenovo T15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOS ≤ 1.84 affected
Lenovo T15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOS ≤ 1.68 affected
Lenovo T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS < 1.16 affected
Lenovo T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS < 1.12 affected
Lenovo T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS < 1.08 affected
Lenovo T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS < 1.85/1.26 affected
Lenovo ThinkPad S2 Gen 7 Type 21BD BIOS ≤ 1.36 affected
Lenovo ThinkPad S2 Yoga Gen 6 Type 21AG China Only BIOS ≤ 1.38 affected
Lenovo ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS < 1.38/1.36 affected
Lenovo X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS < 1.39 affected
Lenovo X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS < 1.46 affected
Lenovo X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS < 1.15 affected
Lenovo X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS < 1.56 / 1.26 affected
Lenovo X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS < 1.38 / 1.22 affected
Lenovo X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS < 1.34 / 1.19 affected
Lenovo X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS < 1.26 affected
Lenovo X1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOS ≤ 1.35 affected
Lenovo X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS < 1.69 affected
Lenovo X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS < 1.33 / 1.21 affected
Lenovo X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS < 1.29 / 1.11 affected
Lenovo X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS < 1.38 affected
Lenovo X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS < 1.67 / 1.56 affected
Lenovo X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS < 1.41 affected
Lenovo X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS < 1.76 affected
Lenovo X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS < 1.53 affected
Lenovo X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS < 1.38 affected
Lenovo X12 Detachable Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOS ≤ 1.40 affected
Lenovo X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS < 1.22 / 1.15 affected
Lenovo X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS < 1.65 affected
Lenovo X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS < 1.36 affected
Lenovo X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS < 1.37 affected
Lenovo X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS < 1.17 affected
Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS < 1.11 affected
Lenovo X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS < 1.09 affected
Lenovo X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS < 1.58 / 1.18 affected
Lenovo X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS < 1.52/ 1.28 affected
Lenovo X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS < 1.25 affected
Lenovo X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS < 1.22 affected
Lenovo X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS ≤ 1.87 affected
Lenovo X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS < 2.06 / 1.23 affected
Lenovo X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS < 1.21 affected
Lenovo Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS < 1.76 affected
Lenovo Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS < 1.37 affected
获取后续新漏洞提醒 登录后订阅

一、 漏洞 CVE-2025-10237 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: CVE Program / CVE List V5
Vulnerability Description
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
来源: CVE Program / CVE List V5
Vulnerability Type
使用已被攻破或存在风险的密码学算法
来源: CVE Program / CVE List V5
Vulnerability Title
Lenovo ThinkPad 加密问题漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Lenovo ThinkPad是中国联想（Lenovo）公司的一个便携式计算机。 Lenovo ThinkPad存在加密问题漏洞，该漏洞源于嵌入式控制器固件问题，可能导致具有特权的本地用户对特权内存区域执行任意读写。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商 产品 影响版本 CPE 订阅
Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS 0 ~ 1.11 -
Lenovo X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS 0 ~ 1.15 -
Lenovo P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS 0 ~ 1.16 -
Lenovo L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS 0 ~ 1.40 -
Lenovo T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS 0 ~ 1.11 -
Lenovo P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS 0 ~ UEFI BIOS V1.22/ECP V1.13 -
Lenovo L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS 0 ~ 1.15 -
Lenovo L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS 0 ~ 1.14 -
Lenovo L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS 0 ~ 1.13 -
Lenovo X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS 0 ~ 1.09 -
Lenovo T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS 0 ~ 1.09 -
Lenovo X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS 0 ~ 1.46 -
Lenovo X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS 0 ~ 1.26 -
Lenovo Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS 0 ~ 1.37 -
Lenovo P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS 0 ~ 1.65/1.13 -
Lenovo X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS 0 ~ 1.37 -
Lenovo T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS 0 ~ 1.28 -
Lenovo P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS 0 ~ 1.47 -
Lenovo P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS 0 ~ 1.39 / 1.15 -
Lenovo P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS 0 ~ BIOS: 1.66 / ECFW: 1.10 -
Lenovo P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS 0 ~ BIOS: 1.99/ ECFW: 1.58 -
Lenovo X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS 0 ~ 1.22 -
Lenovo P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS 0 ~ 1.52 -
Lenovo T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS 0 ~ 1.23 -
Lenovo L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS 0 ~ 1.34 -
Lenovo L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS 0 ~ 1.24 -
Lenovo X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS 0 ~ 1.29 / 1.11 -
Lenovo S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS 0 ~ 1.28 -
Lenovo L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS 0 ~ 1.27 -
Lenovo X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS 0 ~ 1.38 -

二、漏洞 CVE-2025-10237 的公开POC

# POC 描述 源链接 神龙链接
AI 生成 POC 高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2025-10237 的情报信息

请登录查看更多情报信息。

CVE-2025-10237 厂商安全公告 (1)

同批安全公告 · Lenovo · 2026-06-10 · 共 6 条

CVE-2026-8637 7.8 HIGH Lenovo LanSchool Classic 代码问题漏洞
CVE-2026-9045 7.8 HIGH Lenovo Accessories and Display Manager for Enterprise 访问控制错误漏洞
CVE-2026-6090 7.0 HIGH Lenovo Smart Connect 安全漏洞
CVE-2025-10238 6.7 MEDIUM Lenovo ThinkPad 缓冲区错误漏洞
CVE-2026-7516 4.3 MEDIUM Lenovo Android Application 安全漏洞

IV. Related Vulnerabilities

Same product: X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS
Same vendor: Lenovo
Same weakness: CWE-327

V. Comments for CVE-2025-10237

暂无评论

发表评论