← Back

Thinkpad X13 Yoga Gen 1 Firmware

thinkpad_x13_yoga_gen_1_firmware

Vendor: Lenovo • 6 CVEs

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-4574
1Lenovo
54Thinkpad L14 Firmware
Thinkpad L14 Gen 2 FirmwareThinkpad L15 Firmware+51 more
Nov 21, 2024
Oct 30, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.  
CVE-2022-48189
1Lenovo
85Thinkpad E14 Firmware
Thinkpad E14 Gen 2 FirmwareThinkpad E14 Gen 4 Firmware+82 more
Nov 21, 2024
Oct 30, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2023-2290
1Lenovo
85Thinkpad E14 Firmware
Thinkpad E14 Gen 2 FirmwareThinkpad E14 Gen 4 Firmware+82 more
Nov 21, 2024
Jun 26, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2022-40134
1Lenovo
325Ideacentre 3 07ada05 Firmware
Ideacentre 3 07imb05 FirmwareIdeacentre 3 07iab7 Firmware+322 more
Nov 21, 2024
Jan 30, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
CVE-2021-3786
1Lenovo
133Ideapad S940 14iwl Firmware
Ideapad Yoga S940 14iwl FirmwareThinkpad 10 Firmware+130 more
Nov 21, 2024
Nov 12, 2021
N/A· v4
5.5 MEDIUM· v3
2.1 LOW· v2
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
CVE-2021-3599
1Lenovo
133Ideapad S940 14iwl Firmware
Ideapad Yoga S940 14iwl FirmwareThinkpad 10 Firmware+130 more
Nov 21, 2024
Nov 12, 2021
N/A· v4
6.7 MEDIUM· v3
7.2 HIGH· v2
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.