Skip to content

Known vulnerabilities in Lenovo ThinkPad BIOS

Is your version affected?

CVE Summary Score Published
CVE-2023-5078 A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated… 6.7 Medium Nov 8, 2023
CVE-2022-4575 A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models… 6.7 Medium Oct 30, 2023
CVE-2022-48189 An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium Oct 30, 2023
CVE-2022-4574 An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local… 6.7 Medium Oct 30, 2023
CVE-2022-1108 A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1… 6.7 Medium Apr 22, 2022
CVE-2022-1107 During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI… 6.7 Medium Apr 22, 2022
CVE-2021-3843 A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with… 6.7 Medium Nov 12, 2021
CVE-2021-3718 A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the… 4.3 Medium Nov 12, 2021
CVE-2021-3599 A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow… 6.7 Medium Nov 12, 2021
CVE-2021-3452 A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker… 6.7 Medium Jul 16, 2021

Other Lenovo products