Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-0896: Lenovo Smart Clock Essential Vulnerability - Lenovo Support US

A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local network access.

CVE
#vulnerability#lenovo#auth

About Lenovo

  • Our Company
  • News
  • Investor Relations
  • Sustainability
  • Product Compliance
  • Product Security
  • Lenovo Open Source
  • Legal Information
  • Jobs at Lenovo

Shop

  • Laptops & Ultrabooks
  • Tablets
  • Desktops & All-in-Ones
  • Workstations
  • Accessories & Software
  • Servers
  • Storage
  • Networking
  • Laptop Deals
  • Outlet

Support

  • Drivers & Software
  • How To’s
  • Warranty Lookup
  • Parts Lookup
  • Contact Us
  • Repair Status Check
  • Imaging & Security Resources

Resources

  • Where to Buy
  • Shopping Help
  • Track Order Status
  • Product Specifications (PSREF)
  • Forums
  • Registration
  • Product Accessibility
  • Environmental Information
  • Gaming Community
  • LenovoEDU Community
  • LenovoPRO Community

© Lenovo.
| | | |

Related news

Vulnerability Spotlight: Hard-coded password vulnerability could allow attacker to completely take over Lenovo Smart Clock

Talos also alerted Lenovo that the clock’s hardcoded root password is weak and easily guessed or cracked.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907