Lenovo BIOS

• CVE-2023-25493 Medium 6.7 A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and ThinkStation products that could allow a local user with elevated privileges to ex 0.2%
• CVE-2023-45079 Medium 6.7 A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables. 0.2%
• CVE-2023-45078 Medium 6.7 A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables. 0.2%
• CVE-2023-45077 Medium 6.7 A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. 0.2%
• CVE-2023-45076 Medium 6.7 A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. 0.2%
• CVE-2023-45075 Medium 6.7 A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables. 0.2%
• CVE-2022-3431 Medium 6.7 A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to m 0.2%
• CVE-2022-40137 Medium 6.7 A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code. 0.2%
• CVE-2022-40136 Medium 4.4 An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. 0.2%
• CVE-2022-40135 Medium 4.4 An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. 0.2%
• CVE-2022-40134 Medium 4.4 An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. 0.2%
• CVE-2022-3432 Medium 6.7 A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure bo 0.3%
• CVE-2022-3430 Medium 6.7 A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable. 0.3%
• CVE-2022-1892 Medium 6.7 A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. 0.4%
• CVE-2022-1891 Medium 6.7 A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. 0.4%
• CVE-2022-1890 Medium 6.7 A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code. 0.4%
• CVE-2021-4212 Medium 6.7 A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arb 0.3%
• CVE-2021-4211 Medium 6.7 A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevat 0.3%
• CVE-2021-4210 Medium 6.7 A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privilege 0.3%
• CVE-2021-3453 Medium 6.8 Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash sto 0.2%
• CVE-2020-8354 Medium 6.4 A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution. 0.3%
• CVE-2020-8352 Low 2.4 In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes. 0.3%
• CVE-2020-8333 Medium 6.4 A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution 0.3%
• CVE-2020-8336 Medium 6.4 Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash. 0.3%
• CVE-2020-8334 Medium 6.1 The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access. 0.3%
• CVE-2020-8323 Medium 6.4 A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. 0.3%
• CVE-2020-8322 Medium 6.4 A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. 0.3%
• CVE-2020-8321 Medium 6.4 A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. 0.3%
• CVE-2020-8320 Medium 6.4 An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. 0.3%