目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

Lenovo 厂商漏洞列表 / CVE 中文分析 387

Lenovo 厂商相关 387 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

联想主要提供个人电脑、服务器及智能设备，其软件生态涵盖固件、BIOS及预装应用。历史漏洞多集中于远程代码执行、缓冲区溢出及权限提升，常源于固件更新机制或驱动组件缺陷。值得关注的是，其ThinkPad系列曾因固件安全机制被曝存在物理访问下的持久化风险，促使厂商强化签名验证与TPM集成。随着物联网设备普及，供应链攻击面扩大，持续的安全更新与透明披露成为其安全治理的关键环节。

Top products by Lenovo: BIOS Desktop BIOS Vantage PC Manager XClarity Controller Printers ThinkPad BIOS ThinkSystem SMM PCManager XClarity Administrator (LXCA) App Store Lenovo XClarity Administrator Service Bridge ThinkPad XClarity Administrator System Update HX5530 Appliance (ThinkAgile) XCC Notebook BIOS Personal Cloud Storage A1 Notebook Lenovo XClarity Controller (XCC) XClarity Orchestrator Yoga Pro 7 15IPH11 BIOS Smart Connect ThinkPad X13s Dock Manager SMM, SMM2, FPC ThinkPlus FU100 Software Fix Accessories and Display Manager
CVE ID 标题 CVSS 风险等级 Published
CVE-2023-4632 Lenovo System Update 代码问题漏洞 — Lenovo System Update CWE-427 7.8 High 2023-11-08
CVE-2022-4575 Lenovo ThinkPad 安全漏洞 — ThinkPad BIOS CWE-276 6.7 Medium 2023-10-30
CVE-2022-48189 Lenovo ThinkPad 输入验证错误漏洞 — ThinkPad BIOS CWE-20 6.7 Medium 2023-10-30
CVE-2022-4574 Lenovo ThinkPad 输入验证错误漏洞 — ThinkPad BIOS CWE-20 6.7 Medium 2023-10-30
CVE-2022-4573 Lenovo ThinkPad 输入验证错误漏洞 — ThinkPad X1 Fold Gen 1 CWE-20 6.7 Medium 2023-10-30
CVE-2022-3702 Lenovo Vantage 安全漏洞 — Vantage HardwareScan Plugin CWE-367 6.1 Medium 2023-10-27
CVE-2022-3701 Lenovo Vantage 安全漏洞 — Vantage SystemUpdate Plugin CWE-367 7.8 High 2023-10-27
CVE-2022-3700 Lenovo Vantage 安全漏洞 — Vantage SystemUpdate Plugin CWE-367 6.1 Medium 2023-10-27
CVE-2022-3611 Lenovo App Store 信息泄露漏洞 — App Store CWE-200 7.6 High 2023-10-27
CVE-2022-3429 Lenovo printers 输入验证错误漏洞 — Printer GM265DN (production date June 2022 and before) CWE-20 6.5 Medium 2023-10-27
CVE-2022-34887 Lenovo printers 授权问题漏洞 — Printer GM265DN (production date June 2022 and before) CWE-287 4.3 Medium 2023-10-27
CVE-2022-34886 Lenovo printers 安全漏洞 — Printer GM265DN (production date June 2022 and before) CWE-120 8.8 High 2023-10-27
CVE-2022-3699 Lenovo Diagnostics 缓冲区错误漏洞 — HardwareScanPlugin CWE-787 7.8 High 2023-10-24
CVE-2022-3698 Lenovo Diagnostics 资源管理错误漏洞 — HardwareScanPlugin CWE-400 4.4 Medium 2023-10-24
CVE-2022-0353 Lenovo Vantage 资源管理错误漏洞 — HardwareScanPlugin CWE-400 4.4 Medium 2023-10-24
CVE-2023-3112 Lenovo ThinkPad T14 Gen 3 安全漏洞 — Elliptic Labs Virtual Lock Sensor CWE-276 7.8 High 2023-10-24
CVE-2023-4608 Lenovo XClarity Controller SQL注入漏洞 — Lenovo XClarity Controller (XCC) CWE-89 4.1 Medium 2023-10-24
CVE-2023-4607 Lenovo XClarity Controller 安全漏洞 — Lenovo XClarity Controller (XCC) CWE-269 7.5 High 2023-10-24
CVE-2023-4606 Lenovo XClarity Controller 安全漏洞 — Lenovo XClarity Controller (XCC) CWE-862 8.1 High 2023-10-24
CVE-2022-48183 Lenovo ThinkPad 安全漏洞 — ThinkPad T14s X13 Gen3 BIOS - Windows CWE-1263 6.1 Medium 2023-10-09
CVE-2022-48182 Lenovo ThinkPad 安全漏洞 — ThinkPad T14s X13 Gen3 BIOS - Windows CWE-1263 6.1 Medium 2023-10-09
CVE-2022-3728 Lenovo ThinkPad 安全漏洞 — ThinkPad T14s Gen 3 BIOS CWE-1263 6.1 Medium 2023-10-09
CVE-2022-3431 Lenovo Notebook 安全漏洞 — BIOS CWE-276 6.7 Medium 2023-10-09
CVE-2022-3746 Lenovo Notebook 访问控制错误漏洞 — Notebook CWE-284 6.7 Medium 2023-08-23
CVE-2022-3745 Lenovo Notebook 信息泄露漏洞 — Notebook CWE-200 4.4 Medium 2023-08-23
CVE-2022-3744 Lenovo Notebook 信任管理问题漏洞 — Notebook CWE-798 6.7 Medium 2023-08-23
CVE-2022-3743 Lenovo Notebook 信息泄露漏洞 — Notebook CWE-200 4.4 Medium 2023-08-23
CVE-2022-3742 Lenovo notebook 安全漏洞 — Notebook CWE-120 6.7 Medium 2023-08-23
CVE-2023-34419 Lenovo Notebook 安全漏洞 — Lenovo Notebook CWE-120 6.7 Medium 2023-08-17
CVE-2023-4030 Lenovo ThinkPad 安全漏洞 — ThinkPad CWE-636 8.4 High 2023-08-17

本页汇总了 Lenovo 厂商截至目前公开的全部 387 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。