|
2020-06-09
|
CVE-2020-8323
|
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
|
14iwl_firmware, 330\-14ast_firmware, 330\-15ast_firmware, 330\-17ast_firmware, 340c\-15api_firmware, 340c\-15ast_firmware, 6_pro\-13\-Iwl_firmware, 6_pro\-14\-Iwl_firmware, 720s\-15ikb_firmware, 720s_touch\-15ikb_firmware, 730s\-13iwl_firmware, C640\-Iml_firmware, E42\-80_firmware, E52\-80_firmware, E53\-80_firmware, K22\-80_firmware, K32\-80_kbl_firmware, K32\-80_skl_firmware, K3_firmware, K4\-Iwl_firmware, Miix_720\-12ikb_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-15api_firmware, S145\-15ast_firmware, S540\-13api_firmware, S750\-Iil_firmware, S940\-14iwl_firmware, Thinkbook_13s\-Iwl_firmware, Thinkbook_14s\-Iwl_firmware, Thinkpad_11e_firmware, Thinkpad_11e_yoga_gen_6_firmware, Thinkpad_13_2nd_gen_firmware, Thinkpad_13_firmware, Thinkpad_a275_firmware, Thinkpad_a285_firmware, Thinkpad_a475_firmware, Thinkpad_a485_firmware, Thinkpad_e14_firmware, Thinkpad_e15_firmware, Thinkpad_e455_firmware, Thinkpad_e460_firmware, Thinkpad_e465_firmware, Thinkpad_e470_firmware, Thinkpad_e475_firmware, Thinkpad_e480_firmware, Thinkpad_e485_firmware, Thinkpad_e490_firmware, Thinkpad_e490s_firmware, Thinkpad_e555_firmware, Thinkpad_e560_firmware, Thinkpad_e560p_firmware, Thinkpad_e565_firmware, Thinkpad_e570_firmware, Thinkpad_e575_firmware, Thinkpad_e580_firmware, Thinkpad_e585_firmware, Thinkpad_e590_firmware, Thinkpad_helix_firmware, Thinkpad_l13_firmware, Thinkpad_l1415_firmware, Thinkpad_l380_firmware, Thinkpad_l380_yoga_firmware, Thinkpad_l390_yoga_firmware, Thinkpad_l460_firmware, Thinkpad_l470_firmware, Thinkpad_l480_firmware, Thinkpad_l490_firmware, Thinkpad_l560_firmware, Thinkpad_l570_firmware, Thinkpad_l580_firmware, Thinkpad_l590_firmware, Thinkpad_p1_firmware, Thinkpad_p43s_firmware, Thinkpad_p50_firmware, Thinkpad_p50s_firmware, Thinkpad_p51_firmware, Thinkpad_p51s_firmware, Thinkpad_p52_firmware, Thinkpad_p52s_firmware, Thinkpad_p53_firmware, Thinkpad_p53s_firmware, Thinkpad_p70_firmware, Thinkpad_p71_firmware, Thinkpad_p72_firmware, Thinkpad_p73_firmware, Thinkpad_r14_firmware, Thinkpad_r490_firmware, Thinkpad_r590_firmware, Thinkpad_s1_3rd_firmware, Thinkpad_s1_firmware, Thinkpad_s1_yoga_firmware, Thinkpad_s1_yoga_vpro_firmware, Thinkpad_s2_yoga_3rd_gen_firmware, Thinkpad_s2_yoga_4th_gen_firmware, Thinkpad_s3_3rd_gen_firmware, Thinkpad_s3_firmware, Thinkpad_s3_gen_2_firmware, Thinkpad_s540_firmware, Thinkpad_s5_2nd_gen_firmware, Thinkpad_s5_firmware, Thinkpad_s5_yoga_15_firmware, Thinkpad_t25_firmware, Thinkpad_t440_firmware, Thinkpad_t440p_firmware, Thinkpad_t440s_firmware, Thinkpad_t460_firmware, Thinkpad_t460p_firmware, Thinkpad_t460s_firmware, Thinkpad_t470_firmware, Thinkpad_t470p_firmware, Thinkpad_t470s_firmware, Thinkpad_t480_firmware, Thinkpad_t480s_firmware, Thinkpad_t490_firmware, Thinkpad_t490s_firmware, Thinkpad_t495_firmware, Thinkpad_t495s_firmware, Thinkpad_t540_firmware, Thinkpad_t540p_firmware, Thinkpad_t550_firmware, Thinkpad_t560_firmware, Thinkpad_t570_firmware, Thinkpad_t580_firmware, Thinkpad_t590_firmware, Thinkpad_w540_firmware, Thinkpad_w541_firmware, Thinkpad_w550s_firmware, Thinkpad_x140e_firmware, Thinkpad_x1_carbon_\(20ax\)_firmware, Thinkpad_x1_carbon_\(20bx\)_firmware, Thinkpad_x1_carbon_firmware, Thinkpad_x1_extreme_firmware, Thinkpad_x1_tablet_firmware, Thinkpad_x1_yoga_firmware, Thinkpad_x240_firmware, Thinkpad_x240s_firmware, Thinkpad_x250_firmware, Thinkpad_x260_firmware, Thinkpad_x270_firmware, Thinkpad_x280_firmware, Thinkpad_x380_yoga_firmware, Thinkpad_x390_firmware, Thinkpad_x390_yoga_firmware, Thinkpad_x395_firmware, Thinkpad_yoga_11e_3rd_gen_firmware, Thinkpad_yoga_11e_4th_gen_firmware, Thinkpad_yoga_11e_5th_gen_firmware, Thinkpad_yoga_11e_\(20dx\)_firmware, Thinkpad_yoga_260_firmware, Thinkpad_yoga_370_firmware, V110\-14ast_firmware, V110\-14ikb_firmware, V110\-15ast_firmware, V130\-15igm_firmware, V130\-15ikb_firmware, V310\-15igm_firmware, V330\-15igm_firmware, V330\-15ikb_firmware, V330\-15isk_firmware, V340\-Iil_firmware, V340\-Iml_firmware, V540s\-13_firmware, V720\-12_firmware, V730\-13ikb_firmware, V730\-13isk_firmware, V730\-15ikb_firmware, Wei5\-15ikb_firmware, Xiaoxin_14\-Ast_qc_2019_firmware, Xx\-14api_qc_2019_firmware, Yoga_s730\-13iwl_firmware, Yoga_s940\-14iwl_firmware
|
6.7
|
|
|
|
2020-06-09
|
CVE-2020-8322
|
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.
|
14iwl_firmware, 330\-14ast_firmware, 330\-15ast_firmware, 330\-17ast_firmware, 340c\-15api_firmware, 340c\-15ast_firmware, 6_pro\-13\-Iwl_firmware, 6_pro\-14\-Iwl_firmware, 720s\-15ikb_firmware, 720s_touch\-15ikb_firmware, 730s\-13iwl_firmware, C640\-Iml_firmware, E42\-80_firmware, E52\-80_firmware, E53\-80_firmware, K22\-80_firmware, K32\-80_kbl_firmware, K32\-80_skl_firmware, K3_firmware, K4\-Iwl_firmware, Miix_720\-12ikb_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-15api_firmware, S145\-15ast_firmware, S540\-13api_firmware, S750\-Iil_firmware, S940\-14iwl_firmware, Thinkbook_13s\-Iwl_firmware, Thinkbook_14s\-Iwl_firmware, V110\-14ast_firmware, V110\-14ikb_firmware, V110\-15ast_firmware, V130\-15igm_firmware, V130\-15ikb_firmware, V310\-15igm_firmware, V330\-15igm_firmware, V330\-15ikb_firmware, V330\-15isk_firmware, V340\-Iil_firmware, V340\-Iml_firmware, V540s\-13_firmware, V720\-12_firmware, V730\-13ikb_firmware, V730\-13isk_firmware, V730\-15ikb_firmware, Wei5\-15ikb_firmware, Xiaoxin_14\-Ast_qc_2019_firmware, Xx\-14api_qc_2019_firmware, Yoga_s730\-13iwl_firmware, Yoga_s940\-14iwl_firmware
|
6.7
|
|
|
|
2022-04-22
|
CVE-2021-3970
|
A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.
|
Ideapad_3\-14ada05_firmware, Ideapad_3\-14ada6_firmware, Ideapad_3\-14alc6_firmware, Ideapad_3\-14are05_firmware, Ideapad_3\-14igl05_firmware, Ideapad_3\-14iil05_firmware, Ideapad_3\-14iml05_firmware, Ideapad_3\-14itl05_firmware, Ideapad_3\-14itl6_firmware, Ideapad_3\-15ada05_firmware, Ideapad_3\-15ada6_firmware, Ideapad_3\-15alc6_firmware, Ideapad_3\-15are05_firmware, Ideapad_3\-15igl05_firmware, Ideapad_3\-15iil05_firmware, Ideapad_3\-15iml05_firmware, Ideapad_3\-15itl05_firmware, Ideapad_3\-15itl6_firmware, Ideapad_3\-17ada05_firmware, Ideapad_3\-17ada6_firmware, Ideapad_3\-17alc6_firmware, Ideapad_3\-17are05_firmware, Ideapad_3\-17iil05_firmware, Ideapad_3\-17iml05_firmware, Ideapad_3\-17itl6_firmware, Ideapad_5\-15are05_firmware, Ideapad_5\-15iil05_firmware, Ideapad_creator_5\-15imh05_firmware, Ideapad_gaming_3\-15arh05_firmware, Ideapad_gaming_3\-15imh05_firmware, L340\-15irh_firmware, L340\-15iwl_firmware, L340\-15iwl_touch_firmware, L340\-17irh_firmware, L340\-17iwl_firmware, L3\-15itl6_firmware, L3_15iml05_firmware, Legion_5\-15ach6_firmware, Legion_5\-15ach6a_firmware, Legion_5\-15ach6h_firmware, Legion_5\-15imh6_firmware, Legion_5\-15ith6_firmware, Legion_5\-15ith6h_firmware, Legion_5\-17ach6_firmware, Legion_5\-17ach6h_firmware, Legion_5\-17ith6_firmware, Legion_5\-17ith6h_firmware, Legion_5_pro\-16ach6_firmware, Legion_5_pro\-16ach6h_firmware, Legion_5_pro\-16ith6_firmware, Legion_5_pro\-16ith6h_firmware, Legion_7\-16achg6_firmware, Legion_7\-16ithg6_firmware, Legion_s7\-15ach6_firmware, Legion_y540\-15irh\-Pg0_firmware, Legion_y540\-15irh_firmware, Legion_y540\-17irh\-Pg0_firmware, Legion_y540\-17irh_firmware, Legion_y545\-Pg0_firmware, Legion_y545_firmware, Legion_y7000\-2019\-Pg0_firmware, Legion_y7000\-2019_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-14igm_firmware, S145\-14iil_firmware, S145\-15api_firmware, S145\-15ast_firmware, S145\-15igm_firmware, S145\-15iil_firmware, S14_g2_itl_firmware, S540\-13api_firmware, S540\-13iml_firmware, Slim_7_pro\-14ihu5_firmware, Slim_9\-14itl05_firmware, V140\-15iwl_firmware, V14\-Ada_firmware, V14\-Are_firmware, V14\-Igl_firmware, V14\-Iil_firmware, V14_g1\-Iml_firmware, V14_g2\-Acl_firmware, V14_g2\-Itl_firmware, V15\-Ada_firmware, V15\-Igl_firmware, V15\-Iil_firmware, V15_g1\-Iml_firmware, V15_g2\-Alc_firmware, V15_g2\-Itl_firmware, V17\-Iil_firmware, V17_g2\-Itl_firmware, V340\-17iwl_firmware, Yoga_7\-14acn6_firmware, Yoga_c740\-14iml_firmware, Yoga_c740\-15iml_firmware, Yoga_c940\-14iil_firmware, Yoga_slim_7_pro\-14ach5_d_firmware, Yoga_slim_7_pro\-14ach5_firmware, Yoga_slim_7_pro\-14ach5_o_firmware, Yoga_slim_7_pro\-14ach5_od_firmware, Yoga_slim_7_pro\-14arh5_firmware, Yoga_slim_7_pro\-14ihu5_firmware, Yoga_slim_7_pro\-14ihu5_o_firmware, Yoga_slim_7_pro\-14itl5_firmware, Yoga_slim_9\-14itl05_firmware
|
6.7
|
|
|
|
2022-04-22
|
CVE-2021-3972
|
A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
|
Ideapad_3\-14ada05_firmware, Ideapad_3\-14ada6_firmware, Ideapad_3\-14alc6_firmware, Ideapad_3\-14are05_firmware, Ideapad_3\-14igl05_firmware, Ideapad_3\-14iil05_firmware, Ideapad_3\-14iml05_firmware, Ideapad_3\-14itl05_firmware, Ideapad_3\-14itl6_firmware, Ideapad_3\-15ada05_firmware, Ideapad_3\-15ada6_firmware, Ideapad_3\-15alc6_firmware, Ideapad_3\-15are05_firmware, Ideapad_3\-15igl05_firmware, Ideapad_3\-15iil05_firmware, Ideapad_3\-15iml05_firmware, Ideapad_3\-15itl05_firmware, Ideapad_3\-15itl6_firmware, Ideapad_3\-17ada05_firmware, Ideapad_3\-17ada6_firmware, Ideapad_3\-17alc6_firmware, Ideapad_3\-17are05_firmware, Ideapad_3\-17iil05_firmware, Ideapad_3\-17iml05_firmware, Ideapad_3\-17itl6_firmware, Ideapad_5\-15are05_firmware, Ideapad_5\-15iil05_firmware, Ideapad_creator_5\-15imh05_firmware, Ideapad_gaming_3\-15arh05_firmware, Ideapad_gaming_3\-15imh05_firmware, L340\-15irh_firmware, L340\-15iwl_firmware, L340\-15iwl_touch_firmware, L340\-17irh_firmware, L340\-17iwl_firmware, L3\-15itl6_firmware, L3_15iml05_firmware, Legion_5\-15ach6_firmware, Legion_5\-15ach6a_firmware, Legion_5\-15ach6h_firmware, Legion_5\-15imh6_firmware, Legion_5\-15ith6_firmware, Legion_5\-15ith6h_firmware, Legion_5\-17ach6_firmware, Legion_5\-17ach6h_firmware, Legion_5\-17ith6_firmware, Legion_5\-17ith6h_firmware, Legion_5_pro\-16ach6_firmware, Legion_5_pro\-16ach6h_firmware, Legion_5_pro\-16ith6_firmware, Legion_5_pro\-16ith6h_firmware, Legion_7\-16achg6_firmware, Legion_7\-16ithg6_firmware, Legion_s7\-15ach6_firmware, Legion_y540\-15irh\-Pg0_firmware, Legion_y540\-15irh_firmware, Legion_y540\-17irh\-Pg0_firmware, Legion_y540\-17irh_firmware, Legion_y545\-Pg0_firmware, Legion_y545_firmware, Legion_y7000\-2019\-Pg0_firmware, Legion_y7000\-2019_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-14igm_firmware, S145\-14iil_firmware, S145\-15api_firmware, S145\-15ast_firmware, S145\-15igm_firmware, S145\-15iil_firmware, S14_g2_itl_firmware, S540\-13api_firmware, S540\-13iml_firmware, Slim_7_pro\-14ihu5_firmware, Slim_9\-14itl05_firmware, V140\-15iwl_firmware, V14\-Ada_firmware, V14\-Are_firmware, V14\-Igl_firmware, V14\-Iil_firmware, V14_g1\-Iml_firmware, V14_g2\-Acl_firmware, V14_g2\-Itl_firmware, V15\-Ada_firmware, V15\-Igl_firmware, V15\-Iil_firmware, V15_g1\-Iml_firmware, V15_g2\-Alc_firmware, V15_g2\-Itl_firmware, V17\-Iil_firmware, V17_g2\-Itl_firmware, V340\-17iwl_firmware, Yoga_7\-14acn6_firmware, Yoga_c740\-14iml_firmware, Yoga_c740\-15iml_firmware, Yoga_c940\-14iil_firmware, Yoga_slim_7_pro\-14ach5_d_firmware, Yoga_slim_7_pro\-14ach5_firmware, Yoga_slim_7_pro\-14ach5_o_firmware, Yoga_slim_7_pro\-14ach5_od_firmware, Yoga_slim_7_pro\-14arh5_firmware, Yoga_slim_7_pro\-14ihu5_firmware, Yoga_slim_7_pro\-14ihu5_o_firmware, Yoga_slim_7_pro\-14itl5_firmware, Yoga_slim_9\-14itl05_firmware
|
6.7
|
|
|
|
2022-04-22
|
CVE-2021-3971
|
A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.
|
Ideapad_3\-14ada05_firmware, Ideapad_3\-14ada6_firmware, Ideapad_3\-14alc6_firmware, Ideapad_3\-14are05_firmware, Ideapad_3\-14igl05_firmware, Ideapad_3\-14iil05_firmware, Ideapad_3\-15ada05_firmware, Ideapad_3\-15ada6_firmware, Ideapad_3\-15alc6_firmware, Ideapad_3\-15are05_firmware, Ideapad_3\-15igl05_firmware, Ideapad_3\-15iil05_firmware, Ideapad_3\-17ada05_firmware, Ideapad_3\-17ada6_firmware, Ideapad_3\-17alc6_firmware, Ideapad_3\-17are05_firmware, Ideapad_3\-17iil05_firmware, Ideapad_5\-15are05_firmware, Ideapad_creator_5\-15imh05_firmware, Ideapad_gaming_3\-15arh05_firmware, Ideapad_gaming_3\-15imh05_firmware, L340\-15irh_firmware, L340\-15iwl_firmware, L340\-15iwl_touch_firmware, L340\-17irh_firmware, L340\-17iwl_firmware, L3\-15itl6_firmware, Legion_5\-15ach6_firmware, Legion_5\-15ach6a_firmware, Legion_5\-15ach6h_firmware, Legion_5\-15ith6_firmware, Legion_5\-15ith6h_firmware, Legion_5\-17ach6_firmware, Legion_5\-17ach6h_firmware, Legion_5\-17ith6_firmware, Legion_5\-17ith6h_firmware, Legion_5_pro\-16ach6_firmware, Legion_5_pro\-16ach6h_firmware, Legion_5_pro\-16ith6_firmware, Legion_5_pro\-16ith6h_firmware, Legion_7\-16achg6_firmware, Legion_7\-16ithg6_firmware, Legion_y540\-15irh\-Pg0_firmware, Legion_y540\-15irh_firmware, Legion_y540\-17irh\-Pg0_firmware, Legion_y540\-17irh_firmware, Legion_y545\-Pg0_firmware, Legion_y545_firmware, Legion_y7000\-2019\-Pg0_firmware, Legion_y7000\-2019_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-14igm_firmware, S145\-14iil_firmware, S145\-15api_firmware, S145\-15ast_firmware, S145\-15igm_firmware, S145\-15iil_firmware, S540\-13api_firmware, V140\-15iwl_firmware, V14\-Ada_firmware, V14\-Are_firmware, V14\-Igl_firmware, V14\-Iil_firmware, V14_g2\-Acl_firmware, V15\-Ada_firmware, V15\-Igl_firmware, V15\-Iil_firmware, V15_g2\-Alc_firmware, V17\-Iil_firmware, V340\-17iwl_firmware, Yoga_slim_7_pro\-14ach5_d_firmware, Yoga_slim_7_pro\-14ach5_od_firmware
|
6.7
|
|
|
|
2023-01-26
|
CVE-2022-1892
|
A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code.
|
100e_2nd_gen_firmware, 100w_gen_3_firmware, 13w_yoga_firmware, 14w_gen_2_firmware, 300e_2nd_gen_firmware, 300w_gen_3_firmware, 500w_gen_3_firmware, 730s\-13iml_firmware, Flex_3\-11ada05_firmware, Flex_5\-14alc05_firmware, Flex_5\-14are05_firmware, Flex_5\-14iil05_firmware, Flex_5\-14itl05_firmware, Flex_5\-15alc05_firmware, Flex_5\-15iil05_firmware, Flex_5\-15itl05_firmware, Ideapad_1\-11ada05_firmware, Ideapad_1\-11igl05_firmware, Ideapad_1\-14ada05_firmware, Ideapad_1\-14igl05_firmware, Ideapad_3\-14ada05_firmware, Ideapad_3\-14ada6_firmware, Ideapad_3\-14alc6_firmware, Ideapad_3\-15ada05_firmware, Ideapad_3\-15ada6_firmware, Ideapad_3\-15alc6_firmware, Ideapad_3\-17ada05_firmware, Ideapad_3\-17ada6_firmware, Ideapad_3\-17alc6_firmware, Ideapad_5\-15alc05_firmware, Ideapad_5_15aba7_firmware, Ideapad_flex_5_14alc7_firmware, Ideapad_flex_5_16alc7_firmware, Ideapad_s940\-14iil_firmware, Ideapad_slim_1\-11ast\-05_firmware, Ideapad_slim_1\-14ast\-05_firmware, Legion_s7\-15ach6_firmware, Legion_s7\-15arh5_firmware, Legion_s7\-15imh5_firmware, S145\-14api_firmware, S145\-14ast_firmware, S145\-15api_firmware, S145\-15ast_firmware, S540\-13api_firmware, Thinkbook_13s\-Iml_firmware, Thinkbook_13s_g2_are_firmware, Thinkbook_13s_g2_itl_firmware, Thinkbook_13s_g3_acn_firmware, Thinkbook_14\-Iil_firmware, Thinkbook_14\-Iml_firmware, Thinkbook_14p_g2_ach_firmware, Thinkbook_14s\-Iml_firmware, Thinkbook_14s_g2_itl_firmware, Thinkbook_15\-Iil_firmware, Thinkbook_15\-Iml_firmware, Thinkbook_16p_g2_ach_firmware, V130\-15ikb_firmware, V14\-Ada_firmware, V14_g2\-Alc_firmware, V15\-Ada_firmware, V15_g2\-Alc_firmware, Yoga_9\-15imh5_firmware, Yoga_c640\-13iml_firmware, Yoga_c640\-13iml_lte_firmware, Yoga_c940\-15irh_firmware, Yoga_s730\-13iml_firmware, Yoga_s940\-14iil_firmware, Yoga_slim_7_pro\-14ach5_firmware, Yoga_slim_7_pro\-14ach5_o_firmware, Yoga_slim_7_pro\-14arh5_firmware
|
7.8
|
|
|