目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

Lenovo 厂商漏洞列表 / CVE 中文分析 387

Lenovo 厂商相关 387 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

联想主要提供个人电脑、服务器及智能设备，其软件生态涵盖固件、BIOS及预装应用。历史漏洞多集中于远程代码执行、缓冲区溢出及权限提升，常源于固件更新机制或驱动组件缺陷。值得关注的是，其ThinkPad系列曾因固件安全机制被曝存在物理访问下的持久化风险，促使厂商强化签名验证与TPM集成。随着物联网设备普及，供应链攻击面扩大，持续的安全更新与透明披露成为其安全治理的关键环节。

Top products by Lenovo: BIOS Desktop BIOS Vantage PC Manager XClarity Controller Printers ThinkPad BIOS ThinkSystem SMM PCManager XClarity Administrator (LXCA) App Store Lenovo XClarity Administrator Service Bridge ThinkPad XClarity Administrator System Update HX5530 Appliance (ThinkAgile) XCC Notebook BIOS Personal Cloud Storage A1 Notebook Lenovo XClarity Controller (XCC) XClarity Orchestrator Yoga Pro 7 15IPH11 BIOS Smart Connect ThinkPad X13s Dock Manager SMM, SMM2, FPC ThinkPlus FU100 Software Fix Accessories and Display Manager
CVE ID 标题 CVSS 风险等级 Published
CVE-2023-4029 Lenovo ThinkPad 安全漏洞 — ThinkPad CWE-120 6.7 Medium 2023-08-17
CVE-2023-4028 Lenovo Notebook 安全漏洞 — Lenovo Notebook CWE-120 6.7 Medium 2023-08-17
CVE-2023-3078 Lenovo Universal Device Client 代码问题漏洞 — Universal Device Client (UDC) CWE-427 7.8 High 2023-08-17
CVE-2023-34422 Lenovo XClarity Administrator 输入验证错误漏洞 — Lenovo XClarity Administrator CWE-20 6.5 Medium 2023-06-26
CVE-2023-34421 Lenovo XClarity Administrator 输入验证错误漏洞 — Lenovo XClarity Administrator CWE-20 6.5 Medium 2023-06-26
CVE-2023-34420 Lenovo XClarity Administrator 操作系统命令注入漏洞 — Lenovo XClarity Administrator CWE-78 7.2 High 2023-06-26
CVE-2023-34418 Lenovo XClarity Administrator SQL注入漏洞 — Lenovo XClarity Administrator CWE-89 8.1 High 2023-06-26
CVE-2023-3113 Lenovo XClarity Administrator 代码问题漏洞 — Lenovo XClarity Administrator CWE-611 8.2 High 2023-06-26
CVE-2023-2993 Lenovo ThinkSystem 安全漏洞 — System Management Module (SMM) CWE-281 5.4 Medium 2023-06-26
CVE-2023-2992 Lenovo ThinkSystem 安全漏洞 — System Management Module (SMM) CWE-405 7.5 High 2023-06-26
CVE-2023-2290 Lenovo ThinkPad 安全漏洞 — ThinkPad CWE-787 6.4 Medium 2023-06-26
CVE-2022-48188 Lenovo Desktops和ThinkStation 缓冲区错误漏洞 — ThinkStation BIOS CWE-787 6.7 Medium 2023-06-05
CVE-2022-48181 Lenovo ThinkPad 缓冲区错误漏洞 — ThinkStation BIOS CWE-787 6.7 Medium 2023-06-05
CVE-2022-4569 ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool 安全漏洞 — ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool CWE-276 7.8 High 2023-06-05
CVE-2022-48186 Lenovo Baiying 信任管理问题漏洞 — Baiying CWE-295 6.2 Medium 2023-05-01
CVE-2022-4568 Lenovo System Update 安全漏洞 — Lenovo System Update CWE-276 7.0 High 2023-05-01
CVE-2023-0683 Lenovo XClarity Controller 安全漏洞 — XClarity Controller CWE-20 8.3 High 2023-05-01
CVE-2023-25492 Lenovo XClarity Controller 格式化字符串错误漏洞 — XClarity Controller CWE-134 6.3 Medium 2023-05-01
CVE-2023-0896 Lenovo Smart Clock Essential 信任管理问题漏洞 — Lenovo Smart Clock Essential with Alexa Built In CWE-20 8.8 High 2023-05-01
CVE-2023-25495 Lenovo XClarity Controller 安全漏洞 — XClarity Controller CWE-522 4.9 Medium 2023-04-28
CVE-2023-25496 Lenovo Drivers Management 安全漏洞 — Lenovo Drivers Management CWE-284 7.8 High 2023-04-28
CVE-2023-29056 Lenovo XClarity Controller 安全漏洞 — XClarity Controller CWE-269 5.3 Medium 2023-04-28
CVE-2023-29057 Lenovo XClarity Controller 安全漏洞 — XClarity Controller CWE-276 7.3 High 2023-04-28
CVE-2023-29058 Lenovo XClarity Controller 安全漏洞 — XClarity Controller CWE-276 6.4 Medium 2023-04-28
CVE-2022-34888 Lenovo XClarity Controller 安全漏洞 — Lenovo XClarity Controller CWE-184 2.7 Low 2023-01-30
CVE-2022-34884 Lenovo XClarity Controller 缓冲区错误漏洞 — Lenovo XClarity Controller CWE-121 7.2 High 2023-01-30
CVE-2022-40137 Lenovo Desktop 安全漏洞 — BIOS CWE-120 6.7 Medium 2023-01-30
CVE-2022-40136 Lenovo Desktops 缓冲区错误漏洞 — BIOS CWE-125 4.4 Medium 2023-01-30
CVE-2022-40135 Lenovo Desktops 缓冲区错误漏洞 — BIOS CWE-125 4.4 Medium 2023-01-30
CVE-2022-40134 Lenovo Desktops 缓冲区错误漏洞 — BIOS CWE-125 4.4 Medium 2023-01-30

本页汇总了 Lenovo 厂商截至目前公开的全部 387 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。