Lenovo 厂商相关 387 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
联想主要提供个人电脑、服务器及智能设备，其软件生态涵盖固件、BIOS及预装应用。历史漏洞多集中于远程代码执行、缓冲区溢出及权限提升，常源于固件更新机制或驱动组件缺陷。值得关注的是，其ThinkPad系列曾因固件安全机制被曝存在物理访问下的持久化风险，促使厂商强化签名验证与TPM集成。随着物联网设备普及，供应链攻击面扩大，持续的安全更新与透明披露成为其安全治理的关键环节。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2020-8351 | Lenovo Pcmanager 配置错误漏洞 — PCManager CWE-16 | 7.8 | High | 2020-11-30 |
| CVE-2020-8352 | Lenovo Desktop 安全特征问题漏洞 — BIOS CWE-358 | 2.4 | Low | 2020-11-11 |
| CVE-2020-8353 | Lenovo Desktop 配置错误漏洞 — Desktop and Workstation systems CWE-16 | 6.7 | Medium | 2020-11-11 |
| CVE-2020-8354 | Lenovo 安全漏洞 — BIOS CWE-367 | 6.4 | Medium | 2020-11-11 |
| CVE-2020-8349 | CNOS 代码注入漏洞 — Cloud Networking Operating System (CNOS) CWE-20 | 9.8 | Critical | 2020-10-14 |
| CVE-2020-8350 | Lenovo ThinkPad Stack Wireless Router 授权问题漏洞 — ThinkPad Stack WIreless Router firmware CWE-287 | 8.8 | High | 2020-10-14 |
| CVE-2020-8338 | Lenovo Diagnostics 代码问题漏洞 — Diagnostics CWE-426 | 7.8 | High | 2020-10-14 |
| CVE-2020-8345 | Lenovo Vantage 代码问题漏洞 — Vantage HardwareScan Plugin CWE-427 | 7.3 | High | 2020-10-14 |
| CVE-2020-8332 | IBM System x servers 安全漏洞 — System x CWE-367 | 6.4 | Medium | 2020-10-14 |
| CVE-2020-8348 | Lenovo Enterprise Network Disk 跨站脚本漏洞 — Enterprise Network Disk CWE-79 | 6.1 | Medium | 2020-09-24 |
| CVE-2020-8333 | 多款Lenovo Desktops和ThinkStation产品安全漏洞 — BIOS | 6.4 | Medium | 2020-09-24 |
| CVE-2020-8347 | Lenovo Enterprise Network Disk 跨站脚本漏洞 — Enterprise Network Disk CWE-79 | 6.1 | Medium | 2020-09-24 |
| CVE-2020-8340 | IBM BladeCenter 跨站脚本漏洞 — System x IMM2 firmware for: x240, Machine Types: 7162, 2588; x440, Machine Type 7167, 2590 ; x3750 M4, Machine Type: 8753 ; x3250 M6, Machine type 3633, 3943 ; nx360 M5, Machine type 5465, 5467 ; x280/x480/x880 X6 , Machine Type 7196, 4258 ; x3850 X6 and x3950 X6, Machine type 6241 ; x3550 M5, Machine Type 5463, 8869 ; x3650 M5, Machine Type 5462, 8871; x3500 M5, Machine Type 5464, 5478 CWE-79 | 6.3 | Medium | 2020-09-15 |
| CVE-2020-8342 | Lenovo System Update 安全漏洞 — System Update CWE-367 | 7.3 | High | 2020-09-15 |
| CVE-2020-8346 | Lenovo System Interface Foundation和Lenovo Vantage 安全漏洞 — System Interface Foundation CWE-276 | 5.5 | Medium | 2020-09-15 |
| CVE-2020-8341 | Lenovo 安全漏洞 — ThinkPad | 2.1 | - | 2020-09-01 |
| CVE-2020-8335 | Lenovo ThinkPad 未授权访问漏洞 — ThinkPad A285 BIOS | 6.1 | Medium | 2020-09-01 |
| CVE-2020-8317 | Lenovo Drivers Management 代码问题漏洞 — Drivers Management CWE-426 | 7.3 | High | 2020-07-24 |
| CVE-2020-8326 | Lenovo Drivers Management 代码问题漏洞 — Drivers Management CWE-428 | 7.3 | High | 2020-07-24 |
| CVE-2020-8336 | 多款Lenovo ThinkPad产品安全漏洞 — BIOS | 6.4 | Medium | 2020-06-09 |
| CVE-2020-8337 | Synaptics Smart Audio UWP app 代码问题漏洞 — Synaptics Smart Audio UWP App CWE-428 | 6.7 | - | 2020-06-09 |
| CVE-2020-8334 | 多款Lenovo产品安全漏洞 — BIOS | 6.1 | Medium | 2020-06-09 |
| CVE-2020-8322 | Lenovo Legacy USB 安全漏洞 — BIOS | 6.4 | Medium | 2020-06-09 |
| CVE-2020-8323 | Lenovo Legacy SD driver 安全漏洞 — BIOS | 6.4 | Medium | 2020-06-09 |
| CVE-2019-6196 | Lenovo安装包代码问题漏洞 — Installation Packages CWE-426 | 6.7 | Medium | 2020-06-09 |
| CVE-2020-8320 | 多款Lenovo ThinkPad产品安全漏洞 — BIOS CWE-489 | 6.4 | Medium | 2020-06-09 |
| CVE-2020-8321 | Lenovo System Lock Preinstallation driver 安全漏洞 — BIOS | 6.4 | Medium | 2020-06-09 |
| CVE-2019-6173 | Lenovo安装包代码问题漏洞 — Installation Packages CWE-426 | 6.7 | Medium | 2020-06-09 |
| CVE-2020-8329 | Lenovo Printer LJ4010DN 输入验证错误漏洞 — Printer LJ4010DN | 5.3 | Medium | 2020-05-28 |
| CVE-2020-8330 | Lenovo Printer LJ4010DN 输入验证错误漏洞 — Printer LJ4010DN | 5.3 | Medium | 2020-05-28 |
本页汇总了 Lenovo 厂商截至目前公开的全部 387 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。