Lenovo Thinkpad L15 vulnerabilities

8 vulnerabilities

Known vulnerabilities in Lenovo Thinkpad L15, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2021-3843lenovothinkpad_11e_3rd_gen_firmware+29
EPSS score
0.28%
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.7.2CVE-2021-3599lenovoideapad_s940-14iwl_firmware+133
EPSS score
0.29%
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.5.5CVE-2021-3786lenovoideapad_s940-14iwl_firmware+133
EPSS score
0.23%
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.4.7CVE-2021-3718lenovothinkpad_11e_3rd_gen_firmware+39
EPSS score
0.22%
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biometrics setting is enabled in BIOS.4.4CVE-2022-40134lenovobios+325
EPSS score
0.20%
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.6.7CVE-2022-48189lenovothinkpad bios+85
EPSS score
0.19%
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.6.7CVE-2022-4574lenovothinkpad bios+54
EPSS score
0.19%
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.6.7CVE-2023-2290lenovothinkpad+85
EPSS score
0.16%
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.