目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

Lenovo 厂商漏洞列表 / CVE 中文分析 387

Lenovo 厂商相关 387 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

联想主要提供个人电脑、服务器及智能设备，其软件生态涵盖固件、BIOS及预装应用。历史漏洞多集中于远程代码执行、缓冲区溢出及权限提升，常源于固件更新机制或驱动组件缺陷。值得关注的是，其ThinkPad系列曾因固件安全机制被曝存在物理访问下的持久化风险，促使厂商强化签名验证与TPM集成。随着物联网设备普及，供应链攻击面扩大，持续的安全更新与透明披露成为其安全治理的关键环节。

Top products by Lenovo: BIOS Desktop BIOS Vantage PC Manager XClarity Controller Printers ThinkPad BIOS ThinkSystem SMM PCManager XClarity Administrator (LXCA) App Store Lenovo XClarity Administrator Service Bridge ThinkPad XClarity Administrator System Update HX5530 Appliance (ThinkAgile) XCC Notebook BIOS Personal Cloud Storage A1 Notebook Lenovo XClarity Controller (XCC) XClarity Orchestrator Yoga Pro 7 15IPH11 BIOS Smart Connect ThinkPad X13s Dock Manager SMM, SMM2, FPC ThinkPlus FU100 Software Fix Accessories and Display Manager
CVE ID 标题 CVSS 风险等级 Published
CVE-2022-4816 Lenovo Safecenter 安全漏洞 — Safecenter CWE-400 6.2 Medium 2023-01-23
CVE-2022-3432 Lenovo IdeaPad Y700-14ISK 安全漏洞 — BIOS CWE-276 6.7 Medium 2023-01-23
CVE-2022-3430 Lenovo Notebook 安全漏洞 — BIOS CWE-276 6.7 Medium 2023-01-23
CVE-2022-1892 Lenovo Notebook 安全漏洞 — BIOS CWE-122 6.7 Medium 2023-01-23
CVE-2022-1891 Lenovo Notebook 安全漏洞 — BIOS CWE-122 6.7 Medium 2023-01-23
CVE-2022-1890 Lenovo Notebook 缓冲区错误漏洞 — BIOS CWE-122 6.7 Medium 2023-01-23
CVE-2022-1109 Lenovo Leyun cloud music 安全漏洞 — Leyun CWE-276 5.5 Medium 2023-01-20
CVE-2022-4435 Lenovo ThinkPad 缓冲区错误漏洞 — ThinkPad X13s CWE-126 6.7 Medium 2023-01-05
CVE-2022-4434 Lenovo ThinkPad 缓冲区错误漏洞 — ThinkPad X13s CWE-126 6.7 Medium 2023-01-05
CVE-2022-4433 Lenovo ThinkPad 缓冲区错误漏洞 — ThinkPad X13s CWE-126 6.7 Medium 2023-01-05
CVE-2022-4432 Lenovo ThinkPad 缓冲区错误漏洞 — ThinkPad X13s CWE-126 6.7 Medium 2023-01-05
CVE-2022-1513 Lenovo Pcmanager 操作系统命令注入漏洞 — PCManager CWE-78 7.3 High 2022-08-23
CVE-2022-1110 Lenovo Smart Standby Driver 安全漏洞 — Smart Standby Driver CWE-120 5.5 Medium 2022-05-18
CVE-2021-42852 Lenovo Personal Cloud Storage 操作系统命令注入漏洞 — Personal Cloud Storage A1 CWE-78 8.0 High 2022-05-18
CVE-2021-42851 Lenovo Personal Cloud Storage 安全漏洞 — Personal Cloud Storage A1 CWE-862 6.3 Medium 2022-05-18
CVE-2021-42850 Lenovo Personal Cloud Storage 信任管理问题漏洞 — Personal Cloud Storage A1 CWE-798 8.8 High 2022-05-18
CVE-2021-42849 Lenovo Personal Cloud Storage 授权问题漏洞 — Personal Cloud Storage A1 CWE-798 6.8 Medium 2022-05-18
CVE-2021-42848 Lenovo Personal Cloud Storage 安全漏洞 — Personal Cloud Storage A1 CWE-862 4.3 Medium 2022-05-18
CVE-2021-3969 Lenovo Vantage 安全漏洞 — IMController CWE-367 7.8 High 2022-05-18
CVE-2021-3956 Lenovo XClarity Controller 安全漏洞 — XClarity Controller (XCC) CWE-863 4.3 Medium 2022-05-18
CVE-2021-3922 Lenovo Vantage 竞争条件问题漏洞 — IMController CWE-367 7.8 High 2022-05-18
CVE-2021-3897 Lenovo Fan Power Controller2 授权问题漏洞 — Fan Power Controller2 (FPC2) CWE-288 9.8 Critical 2022-04-22
CVE-2021-3849 Lenovo Fan Power Controller2和Lenovo System Management Module 授权问题漏洞 — Fan Power Controller2 (FPC2) CWE-288 9.8 Critical 2022-04-22
CVE-2022-1108 Lenovo ThinkPad 缓冲区错误漏洞 — ThinkPad BIOS CWE-20 6.7 Medium 2022-04-22
CVE-2022-1107 Lenovo ThinkPad 权限许可和访问控制问题漏洞 — ThinkPad BIOS CWE-20 6.7 Medium 2022-04-22
CVE-2022-0636 Lenovo Thin Installer 输入验证错误漏洞 — Thin Installer CWE-120 5.0 Medium 2022-04-22
CVE-2022-0354 Lenovo Vantage代码注入漏洞 — System Update 7.3 High 2022-04-22
CVE-2022-0192 Lenovo PCManager 代码问题漏洞 — PCManager CWE-427 7.3 High 2022-04-22
CVE-2021-4212 Lenovo Notebook 输入验证错误漏洞 — BIOS CWE-20 6.7 Medium 2022-04-22
CVE-2021-4211 Intel Processors 输入验证错误漏洞 — BIOS CWE-20 6.7 Medium 2022-04-22

本页汇总了 Lenovo 厂商截至目前公开的全部 387 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。