Lenovo A340 24 Iwl vulnerabilities

4 vulnerabilities

Known vulnerabilities in Lenovo A340 24 Iwl, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2019-6170lenovo130-14ikb_firmware+392
EPSS score
0.35%
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.6.4CVE-2019-6172lenovo130-14ikb_firmware+392
EPSS score
0.33%
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.9.8CVE-2019-6188lenovo130-14ikb_firmware+391
EPSS score
1.32%
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.5.5CVE-2019-6190lenovo510-15ikl_firmware+182
EPSS score
0.28%
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.