Lenovo bios vulnerabilities
36 vulnerabilities
Known vulnerabilities in Lenovo bios, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-4212lenovobios+62
EPSS score0.26%
A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2021-4210lenovoa540-24icb_firmware+32EPSS score0.26%
A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2021-4211lenovoa340-22icb_firmware+53EPSS score0.26%
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2021-3452lenovobios+1EPSS score0.27%
A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2021-3453lenovo730s-13iml_firmware+21EPSS score0.24%
Some Lenovo Notebook, ThinkPad, and Lenovo Desktop systems have BIOS modules unprotected by Intel Boot Guard that could allow an attacker with physical access the ability to write to the SPI flash storage.CVE-2016-5247lenovobiosEPSS score0.38%
The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devices; and ThinkStation E32, P300, and P310 devices might allow local users or physically proximate attackers to bypass the Secure Boot protection mechanism by leveraging an AMI test key.CVE-2016-8224lenovobios+28EPSS score0.30%
A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that circumvents Intel Management Engine (ME) protections. This could result in a denial of service or privilege escalation attack on the system.CVE-2020-8323lenovo14iwl_firmware+172EPSS score0.33%
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.CVE-2020-8334lenovobios+7EPSS score0.33%
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T495s, X395, T495, A485, A285, A475, A275 which may allow for unauthorized access.CVE-2020-8336lenovobios+38EPSS score0.30%
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.CVE-2020-8354lenovobios+1EPSS score0.26%
A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution.CVE-2020-8320lenovobios+100EPSS score0.28%
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.CVE-2020-8321lenovo130-14ast_firmware+172EPSS score0.34%
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.CVE-2020-8333lenovo63_firmware+27EPSS score0.33%
A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code executionCVE-2020-8322lenovo14iwl_firmware+51EPSS score0.33%
A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.CVE-2020-8352lenovobios+16EPSS score0.31%
In some Lenovo Desktop models, the Configuration Change Detection BIOS setting failed to detect SATA configuration changes.CVE-2022-40137lenovobios+284EPSS score0.23%
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2022-40135lenovobios+133EPSS score0.20%
An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.CVE-2022-40136lenovobios+144EPSS score0.20%
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.CVE-2022-40134lenovobios+325EPSS score0.20%
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.