CVSS: 4.4EPSS: 0%CPEs: 673EXPL: 0CVE-2022-40134
https://notcve.org/view.php?id=CVE-2022-40134
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. • https://support.lenovo.com/us/en/product_security/LEN-94953 • CWE-125: Out-of-bounds Read •
CVSS: 7.8EPSS: 0%CPEs: 288EXPL: 0CVE-2019-19705
https://notcve.org/view.php?id=CVE-2019-19705
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading. Realtek Audio Drivers para Windows, como se usan en Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS y 20BT anteriores a 6.0.8882.1 y 20KH y 20KG anteriores a 6.0.8907.1 (y en muchos otros productos Lenovo y no Lenovo), manejan mal la precarga de DLL. • https://support.lenovo.com/us/en/product_security/ps500315-realtek-audio-driver-vulnerability • CWE-428: Unquoted Search Path or Element •
CVSS: 7.2EPSS: 0%CPEs: 106EXPL: 0CVE-2021-4211
https://notcve.org/view.php?id=CVE-2021-4211
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code. Una posible vulnerabilidad en la función de devolución de llamada SMI usada en el controlador de registro de eventos SMBIOS en algunos modelos de Lenovo Desktop, ThinkStation y ThinkEdge puede permitir a un atacante con acceso local y altos privilegios ejecutar código arbitrario • https://support.lenovo.com/us/en/product_security/LEN-77639 • CWE-20: Improper Input Validation •
CVSS: 7.2EPSS: 0%CPEs: 64EXPL: 0CVE-2021-4210
https://notcve.org/view.php?id=CVE-2021-4210
A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code. Una posible vulnerabilidad en la función de devolución de llamada SMI usada en el controlador NVME en algunos modelos Lenovo Desktop, ThinkStation y ThinkEdge puede permitir a un atacante con acceso local y altos privilegios ejecutar código arbitrario • https://support.lenovo.com/us/en/product_security/LEN-77639 • CWE-20: Improper Input Validation •
CVSS: 6.9EPSS: 0%CPEs: 128EXPL: 0CVE-2021-3519
https://notcve.org/view.php?id=CVE-2021-3519
A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes. Se ha informado de una vulnerabilidad en algunos modelos de ordenadores de sobremesa de Lenovo que podía permitir el acceso no autorizado al menú de arranque, cuando la configuración de la BIOS "BIOS Password At Boot Device List" es Sí • https://support.lenovo.com/us/en/product_security/LEN-67440 • CWE-287: Improper Authentication •