Latest lenovo thinkpad x380 yoga firmware Vulnerabilities

● CVE-2021-3843

A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Lenovo Thinkpad 11e 3rd Gen Firmware<=1.22

Lenovo Thinkpad 11e 3rd Gen

Lenovo Thinkpad 11e 3rd Gen Firmware<=1.29

Lenovo Thinkpad 11e 4th Gen I3 Firmware<=1.22

Lenovo Thinkpad 11e 4th Gen I3

Lenovo Thinkpad 11e 4th Gen I7 Firmware<=1.22

and 56 more

● CVE-2021-3786

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.

Lenovo Thinkpad X380 Yoga Firmware<2020-10-31

Lenovo Thinkpad X380 Yoga

Lenovo Thinkpad X1 Fold Gen 1 Firmware<2021-10-29

Lenovo Thinkpad X1 Fold Gen 1

Lenovo Thinkpad Yoga 260 Firmware<2021-10-25

Lenovo Thinkpad Yoga 260

and 263 more

● CVE-2021-3599

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.

Lenovo Thinkpad X380 Yoga Firmware<2020-10-31

Lenovo Thinkpad X380 Yoga

Lenovo Thinkpad X1 Fold Gen 1 Firmware<2021-10-29

Lenovo Thinkpad X1 Fold Gen 1

Lenovo Thinkpad Yoga 260 Firmware<2021-10-25

Lenovo Thinkpad Yoga 260

and 263 more

● CVE-2019-18619

Synaptics Vfs75xx Firmware=5.2.225.26

Synaptics Vfs75xx Firmware=5.2.318.26

Synaptics Vfs75xx Firmware=5.2.524.26

Synaptics Vfs75xx Firmware=5.2.3530.26

Synaptics Vfs75xx Firmware=5.3.3539.26

Synaptics Vfs75xx Firmware=5.5.3.1116

and 234 more

● CVE-2019-18618

Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions prior to 2019-11-15) allows a local administrator or physical attacke...

Synaptics Vfs75xx Firmware=5.1.5.51

Synaptics Vfs75xx Firmware=5.1.337.26

Synaptics Vfs75xx Firmware=5.1.3507.26

Synaptics Vfs75xx Firmware=5.2.320.26

Synaptics Vfs75xx Firmware=5.2.524.26

Synaptics Vfs75xx Firmware=5.2.3109.26

and 279 more

● CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

Lenovo Thinkpad 11e Yoga Gen 6 Firmware<2020-07-10

Lenovo Thinkpad 11e Yoga Gen 6

Lenovo Thinkpad 11e Firmware<2020-07-10

Lenovo Thinkpad 11e

Lenovo Thinkpad Yoga 11e 3rd Gen Firmware<2020-07-10

Lenovo Thinkpad Yoga 11e 3rd Gen

and 194 more

● CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.

Lenovo 330-14ast Firmware

Lenovo 330-14ast

Lenovo 330-15ast Firmware

Lenovo 330-15ast

Lenovo 330-17ast Firmware

Lenovo 330-17ast

and 338 more

● CVE-2019-6170

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.

Lenovo 510-15ikl Firmware

Lenovo 510-15ikl

Lenovo 510s-08ikl Firmware

Lenovo 510s-08ikl

Lenovo Ideacentre 300-20ish Firmware

Lenovo Ideacentre 300-20ish

and 778 more

● CVE-2019-6156

Lenovo 510-15ikl Firmware

Lenovo 510-15ikl

Lenovo 510s-08ikl Firmware

Lenovo 510s-08ikl

Lenovo Ideacentre 300-20ish Firmware

Lenovo Ideacentre 300-20ish

and 349 more

● CVE-2018-9062

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

Lenovo E42-80 Firmware<2wcn40ww

Lenovo E42-80

Lenovo E42-80 Isk Firmware<0zcn48ww

Lenovo E42-80 Isk

Lenovo E52-80 Firmware<2wcn40ww

Lenovo E52-80

and 94 more

Latest lenovo thinkpad x380 yoga firmware Vulnerabilities

Company

Resources

Contact