Lenovo Thinkpad X1 Fold Gen 1 vulnerabilities

6 vulnerabilities

Known vulnerabilities in Lenovo Thinkpad X1 Fold Gen 1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.2CVE-2021-3843lenovothinkpad_11e_3rd_gen_firmware+29
EPSS score
0.28%
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.7.2CVE-2021-3599lenovoideapad_s940-14iwl_firmware+133
EPSS score
0.29%
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.5.5CVE-2021-3786lenovoideapad_s940-14iwl_firmware+133
EPSS score
0.23%
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.7.2CVE-2022-1108lenovothinkpad bios+1
EPSS score
0.26%
A potential vulnerability due to improper buffer validation in the SMI handler LenovoFlashDeviceInterface in Thinkpad X1 Fold Gen 1 could be exploited by an attacker with local access and elevated privileges to execute arbitrary code.6.7CVE-2022-4573lenovothinkpad_x1_fold_gen_1_firmware
EPSS score
0.19%
An SMI handler input validation vulnerability in the ThinkPad X1 Fold Gen 1 could allow an attacker with local access and elevated privileges to execute arbitrary code.6.7CVE-2022-4574lenovothinkpad bios+54
EPSS score
0.19%
An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.