Latest lenovo thinkpad x1 extreme 2nd firmware Vulnerabilities

● CVE-2021-3786

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.

Lenovo Thinkpad X380 Yoga Firmware<2020-10-31

Lenovo Thinkpad X380 Yoga

Lenovo Thinkpad X1 Fold Gen 1 Firmware<2021-10-29

Lenovo Thinkpad X1 Fold Gen 1

Lenovo Thinkpad Yoga 260 Firmware<2021-10-25

Lenovo Thinkpad Yoga 260

and 263 more

● CVE-2021-3599

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Lenovo Thinkpad X380 Yoga Firmware<2020-10-31

Lenovo Thinkpad X380 Yoga

Lenovo Thinkpad X1 Fold Gen 1 Firmware<2021-10-29

Lenovo Thinkpad X1 Fold Gen 1

Lenovo Thinkpad Yoga 260 Firmware<2021-10-25

Lenovo Thinkpad Yoga 260

and 263 more

● CVE-2019-18619

Synaptics Vfs75xx Firmware=5.2.225.26

Synaptics Vfs75xx Firmware=5.2.318.26

Synaptics Vfs75xx Firmware=5.2.524.26

Synaptics Vfs75xx Firmware=5.2.3530.26

Synaptics Vfs75xx Firmware=5.3.3539.26

Synaptics Vfs75xx Firmware=5.5.3.1116

and 234 more

● CVE-2019-18618

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacke...

Synaptics Vfs75xx Firmware=5.1.5.51

Synaptics Vfs75xx Firmware=5.1.337.26

Synaptics Vfs75xx Firmware=5.1.3507.26

Synaptics Vfs75xx Firmware=5.2.320.26

Synaptics Vfs75xx Firmware=5.2.524.26

Synaptics Vfs75xx Firmware=5.2.3109.26

and 279 more

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.