Latest lenovo thinkpad e490 firmware Vulnerabilities

● CVE-2022-48189
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
Lenovo Thinkpad E14 Firmware<1.23
Lenovo Thinkpad E14
Lenovo Thinkpad E14 Gen 2 Firmware<1.55
Lenovo Thinkpad E14 Gen 2
Lenovo Thinkpad E14 Gen 4 Firmware<1.18
Lenovo Thinkpad E14 Gen 4
and 174 more
● CVE-2023-2290
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.
Lenovo Thinkpad E14 Firmware=1.23
Lenovo Thinkpad E14
Lenovo Thinkpad E14 Gen 2 Firmware=1.55
Lenovo Thinkpad E14 Gen 2
Lenovo Thinkpad E14 Gen 4 Firmware=1.18
Lenovo Thinkpad E14 Gen 4
and 195 more
● CVE-2022-40134
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Lenovo Ideacentre C5-14imb05 Firmware=o4hkt38a
Lenovo Ideacentre C5-14imb05
Lenovo Thinkcentre E96z Firmware=m26kt22a
Lenovo Thinkcentre E96z
Lenovo Ideacentre 3 07iab7 Firmware=m49kt1da
Lenovo Ideacentre 3 07iab7
and 656 more
● CVE-2021-3786
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
Lenovo Thinkpad X380 Yoga Firmware<2020-10-31
Lenovo Thinkpad X380 Yoga
Lenovo Thinkpad X1 Fold Gen 1 Firmware<2021-10-29
Lenovo Thinkpad X1 Fold Gen 1
Lenovo Thinkpad Yoga 260 Firmware<2021-10-25
Lenovo Thinkpad Yoga 260
and 263 more
● CVE-2021-3599
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Lenovo Thinkpad X380 Yoga Firmware<2020-10-31
Lenovo Thinkpad X380 Yoga
Lenovo Thinkpad X1 Fold Gen 1 Firmware<2021-10-29
Lenovo Thinkpad X1 Fold Gen 1
Lenovo Thinkpad Yoga 260 Firmware<2021-10-25
Lenovo Thinkpad Yoga 260
and 263 more
● CVE-2019-18619
Synaptics Vfs75xx Firmware=5.2.225.26
Synaptics Vfs75xx Firmware=5.2.318.26
Synaptics Vfs75xx Firmware=5.2.524.26
Synaptics Vfs75xx Firmware=5.2.3530.26
Synaptics Vfs75xx Firmware=5.3.3539.26
Synaptics Vfs75xx Firmware=5.5.3.1116
and 234 more
● CVE-2019-18618
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacke...
Synaptics Vfs75xx Firmware=5.1.5.51
Synaptics Vfs75xx Firmware=5.1.337.26
Synaptics Vfs75xx Firmware=5.1.3507.26
Synaptics Vfs75xx Firmware=5.2.320.26
Synaptics Vfs75xx Firmware=5.2.524.26
Synaptics Vfs75xx Firmware=5.2.3109.26
and 279 more
● CVE-2020-8323
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
Lenovo 330-14ast Firmware
Lenovo 330-14ast
Lenovo 330-15ast Firmware
Lenovo 330-15ast
Lenovo 330-17ast Firmware
Lenovo 330-17ast
and 338 more
● CVE-2020-8320
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
Lenovo Thinkpad 11e Yoga Gen 6 Firmware<2020-07-10
Lenovo Thinkpad 11e Yoga Gen 6
Lenovo Thinkpad 11e Firmware<2020-07-10
Lenovo Thinkpad 11e
Lenovo Thinkpad Yoga 11e 3rd Gen Firmware<2020-07-10
Lenovo Thinkpad Yoga 11e 3rd Gen
and 194 more
● CVE-2020-8336
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.
Lenovo Thinkpad E14 Firmware<2020-07-10
Lenovo Thinkpad E14
Lenovo Thinkpad E15 Firmware<2020-07-10
Lenovo Thinkpad E15
Lenovo Thinkpad R14 Firmware<2020-07-10
Lenovo Thinkpad R14
and 70 more
● CVE-2019-6170
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.
Lenovo 510-15ikl Firmware
Lenovo 510-15ikl
Lenovo 510s-08ikl Firmware
Lenovo 510s-08ikl
Lenovo Ideacentre 300-20ish Firmware
Lenovo Ideacentre 300-20ish
and 778 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203