Read the docs

Lenovo

Records535All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical19CVSS 9.0–10.0
CVSS high254CVSS 7.0–8.9

Exploited now

Lenovo records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Ideacentre 510s-07icb Firmware · all components

Priority LOW 35

A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2023-06-05 No fix listed CWE-787
Priority LOW 35

An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00193 Published 2023-06-05 No fix listed CWE-787
TI-2022-19027 CVE-2022-40137 · GHSA-wqx8-q4r7-4c45

Buffer overflow in Lenovo BIOS

Priority LOW 31

A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00227 Published 2023-01-30 No fix listed CWE-120
Priority LOW 30

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

CVSS 3.1MEDIUM 6.8 Physical No auth No interaction EPSS 0.00238 Published 2021-11-12 No fix listed CWE-287
TI-2021-03076 CVE-2021-4211 · GHSA-rxqj-f9pj-x22r

Improper input validation in Lenovo BIOS

Priority LOW 29

A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to exe…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00261 Published 2022-04-22 No fix listed CWE-20
TI-2022-19026 CVE-2022-40136 · GHSA-v369-vhcp-5p3x

Out-of-bounds read in Lenovo BIOS

Priority LOW 20

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00196 Published 2023-01-30 No fix listed CWE-125
TI-2022-19025 CVE-2022-40135 · GHSA-rwwv-hvjg-wcrp

Out-of-bounds read in Lenovo BIOS

Priority LOW 20

An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00196 Published 2023-01-30 No fix listed CWE-125
TI-2022-19024 CVE-2022-40134 · GHSA-p7vc-qcj9-2mj9

Out-of-bounds read in Lenovo BIOS

Priority LOW 20

An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00196 Published 2023-01-30 No fix listed CWE-125
Open these records in search →