Aller au contenu

Vulnérabilités connues pour Lenovo BIOS

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2023-25493 A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and… 6.7 Moyenne 5 avr. 2024
CVE-2023-45079 A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated… 6.7 Moyenne 8 nov. 2023
CVE-2023-45078 A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with… 6.7 Moyenne 8 nov. 2023
CVE-2023-45077 A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated… 6.7 Moyenne 8 nov. 2023
CVE-2023-45076 A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated… 6.7 Moyenne 8 nov. 2023
CVE-2023-45075 A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated… 6.7 Moyenne 8 nov. 2023
CVE-2022-3431 A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that… 6.7 Moyenne 9 oct. 2023
CVE-2022-40137 A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated… 6.7 Moyenne 30 janv. 2023
CVE-2022-40136 An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models… 4.4 Moyenne 30 janv. 2023
CVE-2022-40135 An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker… 4.4 Moyenne 30 janv. 2023
CVE-2022-40134 An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker… 4.4 Moyenne 30 janv. 2023
CVE-2022-3432 A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly… 6.7 Moyenne 23 janv. 2023
CVE-2022-3430 A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with… 6.7 Moyenne 23 janv. 2023
CVE-2022-1892 A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local… 6.7 Moyenne 23 janv. 2023
CVE-2022-1891 A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local… 6.7 Moyenne 23 janv. 2023
CVE-2022-1890 A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local… 6.7 Moyenne 23 janv. 2023
CVE-2021-4212 A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook… 6.7 Moyenne 22 avr. 2022
CVE-2021-4211 A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop,… 6.7 Moyenne 22 avr. 2022
CVE-2021-4210 A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and… 6.7 Moyenne 22 avr. 2022
CVE-2021-3453 Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that… 6.8 Moyenne 16 juil. 2021
CVE-2020-8354 A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook… 6.4 Moyenne 11 nov. 2020
CVE-2020-8352 In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration… 2.4 Faible 11 nov. 2020
CVE-2020-8333 A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and… 6.4 Moyenne 24 sept. 2020
CVE-2020-8336 Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME… 6.4 Moyenne 9 juin 2020
CVE-2020-8334 The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which… 6.1 Moyenne 9 juin 2020

Autres produits Lenovo