Thinkpad P71 Firmware

thinkpad_p71_firmware

Vendor: Lenovo • 9 CVEs

CVEs (9)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-19705 1Lenovo 136Aio300 23isu Firmware Aio310 20iap FirmwareAio510 22ish Firmware+133 more Apr 14, 2025 Dec 26, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles...Show more Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.Show less
CVE-2021-3786 1Lenovo 133Ideapad S940 14iwl Firmware Ideapad Yoga S940 14iwl FirmwareThinkpad 10 Firmware+130 more Nov 21, 2024 Nov 12, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
CVE-2021-3599 1Lenovo 133Ideapad S940 14iwl Firmware Ideapad Yoga S940 14iwl FirmwareThinkpad 10 Firmware+130 more Nov 21, 2024 Nov 12, 2021 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2020-8323 1Lenovo 17214iwl Firmware 330 14ast Firmware330 15ast Firmware+169 more Nov 21, 2024 Jun 9, 2020 N/A· v4 6.7 MEDIUM· v3 4.6 MEDIUM· v2 A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
CVE-2020-8320 1Lenovo 100Thinkpad 11e Firmware Thinkpad 11e Yoga Gen 6 FirmwareThinkpad 13 2nd Gen Firmware+97 more Nov 21, 2024 Jun 9, 2020 N/A· v4 6.8 MEDIUM· v3 4.6 MEDIUM· v2 An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
CVE-2019-6188 1Lenovo 392130 14ikb Firmware 130 15ikb Firmware330 14ikb Firmware+389 more Nov 21, 2024 Nov 12, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.
CVE-2019-6172 1Lenovo 392130 14ikb Firmware 130 15ikb Firmware330 14ikb Firmware+389 more Nov 21, 2024 Nov 12, 2019 N/A· v4 6.4 MEDIUM· v3 4.4 MEDIUM· v2 A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.
CVE-2019-6170 1Lenovo 392130 14ikb Firmware 130 15ikb Firmware330 14ikb Firmware+389 more Nov 21, 2024 Nov 12, 2019 N/A· v4 6.4 MEDIUM· v3 4.4 MEDIUM· v2 A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.
CVE-2018-9062 1Lenovo 39E42 80 Firmware E42 80 Isk FirmwareE52 80 Firmware+36 more Nov 21, 2024 Jul 19, 2018 N/A· v4 6.8 MEDIUM· v3 7.2 HIGH· v2 In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.