6 results (0.004 seconds)

CVSS: 6.7EPSS: 0%CPEs: 202EXPL: 0

CVE-2022-48189

https://notcve.org/view.php?id=CVE-2022-48189

30 Oct 2023 — An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code. Una vulnerabilidad de validación de entrada del controlador SMM en el BIOS de algunos modelos ThinkPad podría permitir que un atacante con acceso local y privilegios elevados ejecute código arbitrario. • https://support.lenovo.com/us/en/product_security/LEN-106014 • CWE-20: Improper Input Validation •

CVSS: 6.7EPSS: 0%CPEs: 226EXPL: 0

CVE-2023-2290

https://notcve.org/view.php?id=CVE-2023-2290

26 Jun 2023 — A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code. • https://support.lenovo.com/us/en/product_security/LEN-106014 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •

CVSS: 4.4EPSS: 0%CPEs: 673EXPL: 0

CVE-2022-40134

https://notcve.org/view.php?id=CVE-2022-40134

30 Jan 2023 — An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. • https://support.lenovo.com/us/en/product_security/LEN-94953 • CWE-125: Out-of-bounds Read •

CVSS: 6.8EPSS: 0%CPEs: 76EXPL: 0

CVE-2020-8336

https://notcve.org/view.php?id=CVE-2020-8336

09 Jun 2020 — Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash. Lenovo implementó protecciones de Intel CSME Anti-rollback ARB en algunos modelos ThinkPad para impedir la reversión del Firmware CSME en flash • https://support.lenovo.com/us/en/product_security/LEN-30042 •

CVSS: 6.7EPSS: 0%CPEs: 346EXPL: 0

CVE-2020-8323

https://notcve.org/view.php?id=CVE-2020-8323

09 Jun 2020 — A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. Una potencial vulnerabilidad en la función de devolución de llamada SMI usada en el controlador Legacy SD en algunos modelos Lenovo ThinkPad, ThinkStation y Lenovo Notebook, lo que puede permitir una ejecución de código arbitraria • https://support.lenovo.com/us/en/product_security/LEN-30042 •

CVSS: 6.8EPSS: 0%CPEs: 202EXPL: 0

CVE-2020-8320

https://notcve.org/view.php?id=CVE-2020-8320

09 Jun 2020 — An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. Un shell interno fue incluido en la imagen del BIOS en algunos modelos de ThinkPad que podría permitir una escalada de privilegios • https://support.lenovo.com/us/en/product_security/LEN-30042 • CWE-269: Improper Privilege Management CWE-489: Active Debug Code •