BI
Product
BIOS
23
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 18Low 0
Watch
Add BIOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-3431 | 7.8 | Oct 9 | A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with… Affected: various |
| CVE-2022-1892 | 7.8 | Jan 23 | A buffer overflow in the SystemBootManagerDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code Affected: various |
| CVE-2022-1891 | 7.8 | Jan 23 | A buffer overflow in the SystemLoadDefaultDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code Affected: various |
| CVE-2022-1890 | 7.8 | Jan 23 | A buffer overflow in the ReadyBootDxe driver in some Lenovo Notebook products may allow an attacker with local privileges to execute arbitrary code Affected: various |
| CVE-2016-5247 | 7.8 | Sep 22 | The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240,… Affected: All versions, or not specified |
| CVE-2023-25493 | 6.7 | Apr 5 | A potential vulnerability was reported in the BIOS update tool driver for some Desktop, Smart Edge, Smart Office, and ThinkStation products that could allow a local user with… Affected: various |
| CVE-2023-45079 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: various |
| CVE-2023-45078 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: various |
| CVE-2023-45077 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: various |
| CVE-2023-45076 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: various |
| CVE-2023-45075 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: various |
| CVE-2022-40137 | 6.7 | Jan 30 | A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code Affected: various |
| CVE-2022-3432 | 6.7 | Jan 23 | A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated… Affected: various |
| CVE-2022-3430 | 6.7 | Jan 23 | A potential vulnerability in the WMI Setup driver on some consumer Lenovo Notebook devices may allow an attacker with elevated privileges to modify secure boot setting by… Affected: various |
| CVE-2021-4212 | 6.7 | Apr 22 | A potential vulnerability in the SMI callback function used in the Legacy BIOS mode driver in some Lenovo Notebook models may allow an attacker with local access and elevated… Affected: various |
| CVE-2021-4211 | 6.7 | Apr 22 | A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with… Affected: various |
| CVE-2021-4210 | 6.7 | Apr 22 | A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access… Affected: various |
| CVE-2021-3452 | 6.7 | Jul 16 | A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary… Affected: All versions, or not specified |
| CVE-2017-3754 | 6.7 | Jul 17 | Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS Affected: All versions, or not specified |
| CVE-2022-40136 | 4.4 | Jan 30 | An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges… Affected: various |
| CVE-2022-40135 | 4.4 | Jan 30 | An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory Affected: various |
| CVE-2022-40134 | 4.4 | Jan 30 | An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory Affected: various |
| CVE-2016-8224 | 4.4 | Nov 29 | A vulnerability has been identified in some Lenovo Notebook and ThinkServer systems where an attacker with administrative privileges on a system could install a program that… Affected: All versions, or not specified |
Showing 23