Lenovo Thinkcentre M93Z \(Aio\) vulnerabilities

3 vulnerabilities

Known vulnerabilities in Lenovo Thinkcentre M93Z \(Aio\), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2019-6170lenovo130-14ikb_firmware+392
EPSS score
0.35%
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.6.4CVE-2019-6172lenovo130-14ikb_firmware+392
EPSS score
0.33%
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.9.8CVE-2019-6188lenovo130-14ikb_firmware+391
EPSS score
1.32%
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.