|
2020-06-09
|
CVE-2020-8321
|
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
|
130\-14ast_firmware, 130\-14ikb_firmware, 130\-15ast_firmware, 130\-15ikb_firmware, 320c\-15ikb_firmware, 330\-14igm_firmware, 330\-14ikb_firmware, 330\-14ikbr_firmware, 330\-15arr_firmware, 330\-15arr_touch_firmware, 330\-15ich_firmware, 330\-15igm_firmware, 330\-15ikb_firmware, 330\-15ikbr_firmware, 330\-15ikbr_touch_firmware, 330\-17ich_firmware, 330\-17ikb_firmware, 330\-17ikbr_firmware, 330c\-14ikb_firmware, 330c\-15ikb_firmware, 330c\-15ikbr_firmware, 340c\-15igm_firmware, 340c\-15ikb_firmware, 340c\-15iwl_firmware, 530s\-14arr_firmware, 530s\-14ikb_firmware, 530s\-14iwl_firmware, 530s\-15ikb_firmware, 530s\-15iwl_firmware, 720s\-13arr_firmware, 720s\-14ikbr_firmware, C340\-14api_firmware, C340\-14iml_firmware, C340\-14iwl_firmware, C340\-15iil_firmware, C340\-15iml_firmware, C340\-15iwl_firmware, D330\-10igm_firmware, D335\-10igm_firmware, E43\-80_kbl_firmware, E4\-14arr_firmware, Flex\-14iwl_firmware, Flex\-15iwl_firmware, Flex_6\-1470_firmware, Flex_6\-14arr_firmware, Flex_6\-14ikb_firmware, Ideapad_3_14_firmware, Ideapad_3_14iil05_firmware, Ideapad_3_15_firmware, Ideapad_3_15iil05_firmware, Ideapad_3_17iml05_firmware, Ideapad_5_15iil05_firmware, K43c\-80_firmware, L340\-15api_firmware, L340\-15api_touch_firmware, L340\-15irh_firmware, L340\-15iwl_touch_firmware, L340\-17api_firmware, L340\-17irh_firmware, L340\-17iwl_firmware, L3_15iml05_firmware, Legion_y530\-15ich\-1060_firmware, Legion_y530\-15ich_firmware, Legion_y540\-15_pg0_firmware, Legion_y540\-15irh_firmware, Legion_y540\-17_pg0_firmware, Legion_y540\-17irh_firmware, Legion_y545_firmware, Legion_y545_pg0_firmware, Legion_y7000_2019_firmware, Legion_y7000_pg0_firmware, Legion_y7000p\-1060_firmware, Legion_y7000p_2019_firmware, Legion_y7000p_pg0_firmware, Legion_y730\-15ich_firmware, Legion_y730\-17ich_firmware, Legion_y740\-15ichg_firmware, Legion_y740\-15irhg_firmware, Legion_y740\-17ichg_firmware, Legion_y740\-17irhg_firmware, Legion_y9000k_2019_firmware, Legion_y9000p_2019_firmware, Lenovo_e41\-25_firmware, Lenovo_v320\-17ikb_firmware, Lenovo_v720\-14ikb_firmware, Rescuer_y7000\(1060\)_firmware, Rescuer_y7000_firmware, Rescuer_y7000p\(1060\)_firmware, Rescuer_y7000p_firmware, S145\-14_firmware, S145\-14igm_firmware, S145\-14ikb_firmware, S145\-14iwl_firmware, S145\-15igm_firmware, S145\-15ikb_firmware, S145\-15iwl_firmware, S340\-13iml_firmware, S340\-14_firmware, S340\-14api_firmware, S340\-14iil_firmware, S340\-14iml_firmware, S340\-14iwl_firmware, S340\-14iwl_touch_firmware, S340\-15api_firmware, S340\-15iml_firmware, S340\-15iwl_firmware, S340\-15iwl_touch_firmware, S530\-13iml_firmware, S530\-13iwl_firmware, S540\-14api_firmware, S540\-14iml_firmware, S540\-14iwl_firmware, S540\-14iwl_touch_firmware, S540\-15iml_firmware, S540\-15iwl_firmware, S540\-15iwl_gtx_firmware, S550\-14iil_firmware, Thinkstation_p410_firmware, Thinkstation_p500_firmware, Thinkstation_p510_firmware, Thinkstation_p520_firmware, Thinkstation_p520c_firmware, Thinkstation_p700_firmware, Thinkstation_p710_firmware, Thinkstation_p720_firmware, Thinkstation_p900_firmware, Thinkstation_p910_firmware, Thinkstation_p920_firmware, V130\-14ast_firmware, V130\-14igm_firmware, V130\-14ikb_firmware, V130\-15ast_firmware, V145\-14ast_firmware, V145\-15ast_firmware, V320\-14ikb_firmware, V320\-15ikb_firmware, V320\-17ikbr_firmware, V330\-14arr_firmware, V330\-14ast_firmware, V330\-14igm_firmware, V330\-14isk_firmware, V330\-15ast_firmware, Wei5\-14ikb_firmware, Xiaoxin\-13iml_firmware, Xiaoxin\-14_2019iwl_firmware, Xiaoxin\-14igm_qc_2019_firmware, Xiaoxin\-14iwl_qc_2019_firmware, Xiaoxin\-15_2019iwl_firmware, Xiaoxin_air\-14iwl_2019_firmware, Xiaoxin_air\-15iwl_2019_firmware, Xiaoxin_air_13iwl_firmware, Xiaoxin_air_14arr_firmware, Xiaoxin_air_14ikbr_firmware, Xiaoxin_air_14iwl_firmware, Xiaoxin_air_15ikbr_firmware, Xiaoxin_air_15iwl_firmware, Xx\-14kb_qc_2019_firmware, Y7000_2019_1050_firmware, Yoga_530\-14arr_firmware, Yoga_530\-14ikb_firmware, Yoga_720\-12ikb_firmware, Yoga_730\-13ikb_firmware, Yoga_730\-13iwl_firmware, Yoga_730\-15ikb_firmware, Yoga_730\-15iwl_firmware, Yoga_c740\-14iml_firmware, Yoga_c740\-15iml_firmware, Yoga_c930\-13ikb_firmware, Yoga_c930_glass_firmware, Yoga_c940_firmware, Yoga_s740\-14iil_firmware, Zhaoyang_k42\-80_firmware
|
6.7
|
|
|
|
2022-04-22
|
CVE-2021-3970
|
A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.
|
Ideapad_3\-14ada05_firmware, Ideapad_3\-14ada6_firmware, Ideapad_3\-14alc6_firmware, Ideapad_3\-14are05_firmware, Ideapad_3\-14igl05_firmware, Ideapad_3\-14iil05_firmware, Ideapad_3\-14iml05_firmware, Ideapad_3\-14itl05_firmware, Ideapad_3\-14itl6_firmware, Ideapad_3\-15ada05_firmware, Ideapad_3\-15ada6_firmware, Ideapad_3\-15alc6_firmware, Ideapad_3\-15are05_firmware, Ideapad_3\-15igl05_firmware, Ideapad_3\-15iil05_firmware, Ideapad_3\-15iml05_firmware, Ideapad_3\-15itl05_firmware, Ideapad_3\-15itl6_firmware, Ideapad_3\-17ada05_firmware, Ideapad_3\-17ada6_firmware, Ideapad_3\-17alc6_firmware, Ideapad_3\-17are05_firmware, Ideapad_3\-17iil05_firmware, Ideapad_3\-17iml05_firmware, Ideapad_3\-17itl6_firmware, Ideapad_5\-15are05_firmware, Ideapad_5\-15iil05_firmware, Ideapad_creator_5\-15imh05_firmware, Ideapad_gaming_3\-15arh05_firmware, Ideapad_gaming_3\-15imh05_firmware, L340\-15irh_firmware, L340\-15iwl_firmware, L340\-15iwl_touch_firmware, L340\-17irh_firmware, L340\-17iwl_firmware, L3\-15itl6_firmware, L3_15iml05_firmware, Legion_5\-15ach6_firmware, Legion_5\-15ach6a_firmware, Legion_5\-15ach6h_firmware, Legion_5\-15imh6_firmware, Legion_5\-15ith6_firmware, Legion_5\-15ith6h_firmware, Legion_5\-17ach6_firmware, Legion_5\-17ach6h_firmware, Legion_5\-17ith6_firmware, Legion_5\-17ith6h_firmware, Legion_5_pro\-16ach6_firmware, Legion_5_pro\-16ach6h_firmware, Legion_5_pro\-16ith6_firmware, Legion_5_pro\-16ith6h_firmware, Legion_7\-16achg6_firmware, Legion_7\-16ithg6_firmware, Legion_s7\-15ach6_firmware, Legion_y540\-15irh\-Pg0_firmware, Legion_y540\-15irh_firmware, Legion_y540\-17irh\-Pg0_firmware, Legion_y540\-17irh_firmware, Legion_y545\-Pg0_firmware, Legion_y545_firmware, Legion_y7000\-2019\-Pg0_firmware, Legion_y7000\-2019_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-14igm_firmware, S145\-14iil_firmware, S145\-15api_firmware, S145\-15ast_firmware, S145\-15igm_firmware, S145\-15iil_firmware, S14_g2_itl_firmware, S540\-13api_firmware, S540\-13iml_firmware, Slim_7_pro\-14ihu5_firmware, Slim_9\-14itl05_firmware, V140\-15iwl_firmware, V14\-Ada_firmware, V14\-Are_firmware, V14\-Igl_firmware, V14\-Iil_firmware, V14_g1\-Iml_firmware, V14_g2\-Acl_firmware, V14_g2\-Itl_firmware, V15\-Ada_firmware, V15\-Igl_firmware, V15\-Iil_firmware, V15_g1\-Iml_firmware, V15_g2\-Alc_firmware, V15_g2\-Itl_firmware, V17\-Iil_firmware, V17_g2\-Itl_firmware, V340\-17iwl_firmware, Yoga_7\-14acn6_firmware, Yoga_c740\-14iml_firmware, Yoga_c740\-15iml_firmware, Yoga_c940\-14iil_firmware, Yoga_slim_7_pro\-14ach5_d_firmware, Yoga_slim_7_pro\-14ach5_firmware, Yoga_slim_7_pro\-14ach5_o_firmware, Yoga_slim_7_pro\-14ach5_od_firmware, Yoga_slim_7_pro\-14arh5_firmware, Yoga_slim_7_pro\-14ihu5_firmware, Yoga_slim_7_pro\-14ihu5_o_firmware, Yoga_slim_7_pro\-14itl5_firmware, Yoga_slim_9\-14itl05_firmware
|
6.7
|
|
|
|
2022-04-22
|
CVE-2021-3972
|
A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
|
Ideapad_3\-14ada05_firmware, Ideapad_3\-14ada6_firmware, Ideapad_3\-14alc6_firmware, Ideapad_3\-14are05_firmware, Ideapad_3\-14igl05_firmware, Ideapad_3\-14iil05_firmware, Ideapad_3\-14iml05_firmware, Ideapad_3\-14itl05_firmware, Ideapad_3\-14itl6_firmware, Ideapad_3\-15ada05_firmware, Ideapad_3\-15ada6_firmware, Ideapad_3\-15alc6_firmware, Ideapad_3\-15are05_firmware, Ideapad_3\-15igl05_firmware, Ideapad_3\-15iil05_firmware, Ideapad_3\-15iml05_firmware, Ideapad_3\-15itl05_firmware, Ideapad_3\-15itl6_firmware, Ideapad_3\-17ada05_firmware, Ideapad_3\-17ada6_firmware, Ideapad_3\-17alc6_firmware, Ideapad_3\-17are05_firmware, Ideapad_3\-17iil05_firmware, Ideapad_3\-17iml05_firmware, Ideapad_3\-17itl6_firmware, Ideapad_5\-15are05_firmware, Ideapad_5\-15iil05_firmware, Ideapad_creator_5\-15imh05_firmware, Ideapad_gaming_3\-15arh05_firmware, Ideapad_gaming_3\-15imh05_firmware, L340\-15irh_firmware, L340\-15iwl_firmware, L340\-15iwl_touch_firmware, L340\-17irh_firmware, L340\-17iwl_firmware, L3\-15itl6_firmware, L3_15iml05_firmware, Legion_5\-15ach6_firmware, Legion_5\-15ach6a_firmware, Legion_5\-15ach6h_firmware, Legion_5\-15imh6_firmware, Legion_5\-15ith6_firmware, Legion_5\-15ith6h_firmware, Legion_5\-17ach6_firmware, Legion_5\-17ach6h_firmware, Legion_5\-17ith6_firmware, Legion_5\-17ith6h_firmware, Legion_5_pro\-16ach6_firmware, Legion_5_pro\-16ach6h_firmware, Legion_5_pro\-16ith6_firmware, Legion_5_pro\-16ith6h_firmware, Legion_7\-16achg6_firmware, Legion_7\-16ithg6_firmware, Legion_s7\-15ach6_firmware, Legion_y540\-15irh\-Pg0_firmware, Legion_y540\-15irh_firmware, Legion_y540\-17irh\-Pg0_firmware, Legion_y540\-17irh_firmware, Legion_y545\-Pg0_firmware, Legion_y545_firmware, Legion_y7000\-2019\-Pg0_firmware, Legion_y7000\-2019_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-14igm_firmware, S145\-14iil_firmware, S145\-15api_firmware, S145\-15ast_firmware, S145\-15igm_firmware, S145\-15iil_firmware, S14_g2_itl_firmware, S540\-13api_firmware, S540\-13iml_firmware, Slim_7_pro\-14ihu5_firmware, Slim_9\-14itl05_firmware, V140\-15iwl_firmware, V14\-Ada_firmware, V14\-Are_firmware, V14\-Igl_firmware, V14\-Iil_firmware, V14_g1\-Iml_firmware, V14_g2\-Acl_firmware, V14_g2\-Itl_firmware, V15\-Ada_firmware, V15\-Igl_firmware, V15\-Iil_firmware, V15_g1\-Iml_firmware, V15_g2\-Alc_firmware, V15_g2\-Itl_firmware, V17\-Iil_firmware, V17_g2\-Itl_firmware, V340\-17iwl_firmware, Yoga_7\-14acn6_firmware, Yoga_c740\-14iml_firmware, Yoga_c740\-15iml_firmware, Yoga_c940\-14iil_firmware, Yoga_slim_7_pro\-14ach5_d_firmware, Yoga_slim_7_pro\-14ach5_firmware, Yoga_slim_7_pro\-14ach5_o_firmware, Yoga_slim_7_pro\-14ach5_od_firmware, Yoga_slim_7_pro\-14arh5_firmware, Yoga_slim_7_pro\-14ihu5_firmware, Yoga_slim_7_pro\-14ihu5_o_firmware, Yoga_slim_7_pro\-14itl5_firmware, Yoga_slim_9\-14itl05_firmware
|
6.7
|
|
|
|
2022-04-22
|
CVE-2021-3971
|
A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.
|
Ideapad_3\-14ada05_firmware, Ideapad_3\-14ada6_firmware, Ideapad_3\-14alc6_firmware, Ideapad_3\-14are05_firmware, Ideapad_3\-14igl05_firmware, Ideapad_3\-14iil05_firmware, Ideapad_3\-15ada05_firmware, Ideapad_3\-15ada6_firmware, Ideapad_3\-15alc6_firmware, Ideapad_3\-15are05_firmware, Ideapad_3\-15igl05_firmware, Ideapad_3\-15iil05_firmware, Ideapad_3\-17ada05_firmware, Ideapad_3\-17ada6_firmware, Ideapad_3\-17alc6_firmware, Ideapad_3\-17are05_firmware, Ideapad_3\-17iil05_firmware, Ideapad_5\-15are05_firmware, Ideapad_creator_5\-15imh05_firmware, Ideapad_gaming_3\-15arh05_firmware, Ideapad_gaming_3\-15imh05_firmware, L340\-15irh_firmware, L340\-15iwl_firmware, L340\-15iwl_touch_firmware, L340\-17irh_firmware, L340\-17iwl_firmware, L3\-15itl6_firmware, Legion_5\-15ach6_firmware, Legion_5\-15ach6a_firmware, Legion_5\-15ach6h_firmware, Legion_5\-15ith6_firmware, Legion_5\-15ith6h_firmware, Legion_5\-17ach6_firmware, Legion_5\-17ach6h_firmware, Legion_5\-17ith6_firmware, Legion_5\-17ith6h_firmware, Legion_5_pro\-16ach6_firmware, Legion_5_pro\-16ach6h_firmware, Legion_5_pro\-16ith6_firmware, Legion_5_pro\-16ith6h_firmware, Legion_7\-16achg6_firmware, Legion_7\-16ithg6_firmware, Legion_y540\-15irh\-Pg0_firmware, Legion_y540\-15irh_firmware, Legion_y540\-17irh\-Pg0_firmware, Legion_y540\-17irh_firmware, Legion_y545\-Pg0_firmware, Legion_y545_firmware, Legion_y7000\-2019\-Pg0_firmware, Legion_y7000\-2019_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-14igm_firmware, S145\-14iil_firmware, S145\-15api_firmware, S145\-15ast_firmware, S145\-15igm_firmware, S145\-15iil_firmware, S540\-13api_firmware, V140\-15iwl_firmware, V14\-Ada_firmware, V14\-Are_firmware, V14\-Igl_firmware, V14\-Iil_firmware, V14_g2\-Acl_firmware, V15\-Ada_firmware, V15\-Igl_firmware, V15\-Iil_firmware, V15_g2\-Alc_firmware, V17\-Iil_firmware, V340\-17iwl_firmware, Yoga_slim_7_pro\-14ach5_d_firmware, Yoga_slim_7_pro\-14ach5_od_firmware
|
6.7
|
|
|
|
2022-04-22
|
CVE-2021-4212
|
A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.
|
C340\-14iml_firmware, C340\-15iml_firmware, D330\-10igm_firmware, Duet_3\-10igl5_firmware, E41\-50_firmware, Flex\-14iml_firmware, Flex\-15iml_firmware, Ideapad_3\-14are05_firmware, Ideapad_3\-15are05_firmware, Ideapad_3\-17are05_firmware, Ideapad_5\-14alc05_firmware, Ideapad_5\-14are05_firmware, Ideapad_5\-15itl05_firmware, Ideapad_5_pro\-14acn6_firmware, Ideapad_5_pro\-14itl6_firmware, Ideapad_5_pro\-16ihu6_firmware, Ideapad_creator_5\-15imh05_firmware, Ideapad_gaming_3\-15ach6_firmware, Ideapad_gaming_3\-15arh05_firmware, Ideapad_gaming_3\-15imh05_firmware, L340\-15irh_firmware, L340\-15iwl_firmware, L340\-15iwl_touch_firmware, L340\-17irh_firmware, L340\-17iwl_firmware, Legion_y540\-15irh\-Pg0_firmware, Legion_y540\-15irh_firmware, Legion_y540\-17irh\-Pg0_firmware, Legion_y540\-17irh_firmware, Legion_y545\-Pg0_firmware, Legion_y545_firmware, Legion_y7000\-2019\-Pg0_firmware, Legion_y7000\-2019_firmware, S340\-13iml_firmware, S340\-14api_firmware, S340\-14iml_firmware, S340\-15api_firmware, S340\-15api_touch_firmware, S340\-15iml_firmware, S540\-14iml_firmware, S540\-14iml_touch_firmware, S540\-15iml_firmware, Slim_7\-14are05_firmware, Slim_7\-14itl05_firmware, Slim_7\-15iil05_firmware, Slim_7\-15imh05_firmware, Slim_7\-15itl05_firmware, Thinkbook_13x_itg_firmware, Thinkbook_14_g3_itl_firmware, Thinkbook_plus_g2_itg_firmware, V140\-15iwl_firmware, V14\-Are_firmware, V340\-17iwl_firmware, Yoga_6\-13alc6_firmware, Yoga_creator_7\-15imh05_firmware, Yoga_slim_7\-14are05_firmware, Yoga_slim_7\-14iil05_firmware, Yoga_slim_7\-14itl05_firmware, Yoga_slim_7\-15iil05_firmware, Yoga_slim_7\-15imh05_firmware, Yoga_slim_7\-15itl05_firmware, Yoga_slim_7_carbon_13itl5_firmware
|
6.7
|
|
|