Lenovo Legion Y9000K 2019 vulnerabilities

4 vulnerabilities

Known vulnerabilities in Lenovo Legion Y9000K 2019, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.7CVE-2020-8321lenovo130-14ast_firmware+172
EPSS score
0.34%
A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.6.4CVE-2019-6170lenovo130-14ikb_firmware+392
EPSS score
0.35%
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.6.4CVE-2019-6172lenovo130-14ikb_firmware+392
EPSS score
0.33%
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.9.8CVE-2019-6188lenovo130-14ikb_firmware+391
EPSS score
1.32%
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.