Lenovo Thinkpad P14S Gen 2 vulnerabilities
8 vulnerabilities
Known vulnerabilities in Lenovo Thinkpad P14S Gen 2, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-3599lenovoideapad_s940-14iwl_firmware+133
EPSS score0.29%
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2021-3786lenovoideapad_s940-14iwl_firmware+133EPSS score0.23%
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.CVE-2022-40134lenovobios+325EPSS score0.20%
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.CVE-2022-48189lenovothinkpad bios+85EPSS score0.19%
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2022-4574lenovothinkpad bios+54EPSS score0.19%
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2023-2290lenovothinkpad+85EPSS score0.16%
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2023-4030lenovothinkpad+4EPSS score0.19%
A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt.CVE-2023-4029lenovok14_type_21cu_firmware+26EPSS score0.19%
A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code.