Lenovo Thinkstation P920 Workstation vulnerabilities
21 vulnerabilities
Known vulnerabilities in Lenovo Thinkstation P920 Workstation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-40137lenovobios+284
EPSS score0.23%
A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.CVE-2023-43573lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43570lenovodesktop bios+111EPSS score0.23%
A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code.CVE-2023-43574lenovodesktop bios+111EPSS score0.23%
A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges
to disclose sensitive information.CVE-2023-43571lenovodesktop bios+111EPSS score0.24%
A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43578lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43572lenovodesktop bios+111EPSS score0.22%
A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.CVE-2023-43580lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43579lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43567lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43576lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43569lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43568lenovodesktop bios+111EPSS score0.21%
A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.CVE-2023-43577lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43575lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-43581lenovodesktop bios+111EPSS score0.23%
A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.CVE-2023-45077lenovobios+61EPSS score0.22%
A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.CVE-2023-45078lenovobios+61EPSS score0.23%
A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.CVE-2023-45076lenovobios+61EPSS score0.24%
A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.CVE-2023-45079lenovobios+61EPSS score0.22%
A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.