CVSS: 6.7EPSS: 0%CPEs: 88EXPL: 0CVE-2022-3430
https://notcve.org/view.php?id=CVE-2022-3430
A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable. Una vulnerabilidad potencial en el controlador de configuración WMI en algunos dispositivos portátiles Lenovo Notebook puede permitir que un atacante con privilegios elevados modifique la configuración de arranque seguro modificando una variable NVRAM. • https://support.lenovo.com/us/en/product_security/LEN-94952 • CWE-276: Incorrect Default Permissions •
CVSS: 7.8EPSS: 0%CPEs: 142EXPL: 0CVE-2022-1892
https://notcve.org/view.php?id=CVE-2022-1892
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. • https://support.lenovo.com/us/en/product_security/LEN-91369 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-122: Heap-based Buffer Overflow •
CVSS: 7.2EPSS: 0%CPEs: 124EXPL: 0CVE-2021-4212
https://notcve.org/view.php?id=CVE-2021-4212
A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code. Una posible vulnerabilidad en la función de devolución de llamadas SMI usada en el controlador del modo BIOS heredado en algunos modelos de portátiles Lenovo puede permitir a un atacante con acceso local y altos privilegios ejecutar código arbitrario • https://support.lenovo.com/us/en/product_security/LEN-77639 • CWE-20: Improper Input Validation •