Lenovo Thinkpad 10 vulnerabilities

5 vulnerabilities

Known vulnerabilities in Lenovo Thinkpad 10, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2021-3599lenovoideapad_s940-14iwl_firmware+133
EPSS score
0.29%
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.5.5CVE-2021-3786lenovoideapad_s940-14iwl_firmware+133
EPSS score
0.23%
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.6.4CVE-2019-6170lenovo130-14ikb_firmware+392
EPSS score
0.35%
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.6.4CVE-2019-6172lenovo130-14ikb_firmware+392
EPSS score
0.33%
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.9.8CVE-2019-6188lenovo130-14ikb_firmware+391
EPSS score
1.32%
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for unauthorized access.