Lenovo Thinkpad
13 CVEs affecting Lenovo Thinkpad. Latest disclosed: 2023-08-17. Critical: 2, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-6168 | Critical | 9.8 | 2019-06-26 | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution. |
CVE-2019-6167 | Critical | 9.8 | 2019-06-26 | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow remote code execution. |
CVE-2019-6166 | High | 8.8 | 2019-06-26 | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow cross-site request forgery. |
CVE-2023-4030 | High | 8.4 | 2023-08-17 | A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings… |
CVE-2019-6169 | High | 7.5 | 2019-06-26 | A vulnerability reported in Lenovo Service Bridge before version 4.1.0.1 could allow unencrypted downloads over FTP. |
CVE-2023-4029 | Medium | 6.7 | 2023-08-17 | A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and eleva… |
CVE-2023-2290 | Medium | 6.4 | 2023-06-26 | A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary co… |
CVE-2019-6172 | Medium | 6.4 | 2019-11-12 | A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad mod… |
CVE-2019-6170 | Medium | 6.4 | 2019-11-12 | A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad mod… |
CVE-2019-6163 | Medium | 5.5 | 2019-06-26 | A denial of service vulnerability was reported in Lenovo System Update before version 5.07.0084 that could allow service log files to be written to non-standar… |
CVE-2019-6154 | Medium | 5.3 | 2019-04-10 | A DLL search path vulnerability was reported in Lenovo Bootable Generator, prior to version Mar-2019, that could allow a malicious user with local access to ex… |
CVE-2020-8341 | Low | 2.4 | 2020-09-01 | In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protecti… |
CVE-2007-1307 | | 2007-03-07 | Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impact and attack vecto… |