Skip to content

Known vulnerabilities in Lenovo BIOS

Is your version affected?

CVE Summary Score Published
CVE-2023-25493 A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and… 6.7 Medium Apr 5, 2024
CVE-2023-45079 A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated… 6.7 Medium Nov 8, 2023
CVE-2023-45078 A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with… 6.7 Medium Nov 8, 2023
CVE-2023-45077 A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated… 6.7 Medium Nov 8, 2023
CVE-2023-45076 A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated… 6.7 Medium Nov 8, 2023
CVE-2023-45075 A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated… 6.7 Medium Nov 8, 2023
CVE-2022-3431 A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that… 6.7 Medium Oct 9, 2023
CVE-2022-40137 A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated… 6.7 Medium Jan 30, 2023
CVE-2022-40136 An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models… 4.4 Medium Jan 30, 2023
CVE-2022-40135 An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker… 4.4 Medium Jan 30, 2023
CVE-2022-40134 An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker… 4.4 Medium Jan 30, 2023
CVE-2022-3432 A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly… 6.7 Medium Jan 23, 2023
CVE-2022-3430 A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with… 6.7 Medium Jan 23, 2023
CVE-2022-1892 A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local… 6.7 Medium Jan 23, 2023
CVE-2022-1891 A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local… 6.7 Medium Jan 23, 2023
CVE-2022-1890 A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local… 6.7 Medium Jan 23, 2023
CVE-2021-4212 A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook… 6.7 Medium Apr 22, 2022
CVE-2021-4211 A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop,… 6.7 Medium Apr 22, 2022
CVE-2021-4210 A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and… 6.7 Medium Apr 22, 2022
CVE-2021-3453 Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that… 6.8 Medium Jul 16, 2021
CVE-2020-8354 A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook… 6.4 Medium Nov 11, 2020
CVE-2020-8352 In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration… 2.4 Low Nov 11, 2020
CVE-2020-8333 A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and… 6.4 Medium Sep 24, 2020
CVE-2020-8336 Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME… 6.4 Medium Jun 9, 2020
CVE-2020-8334 The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which… 6.1 Medium Jun 9, 2020

Other Lenovo products