Thinkcentre M4500q Firmware vulnerabilities | LiveThreat CVE Feed

Product

Thinkcentre M4500q Firmware

by Lenovo · last CVE Nov 12, 2021

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 1High 1Medium 5Low 1

Severity

All severities8 Critical1 High1 Medium5 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Thinkcentre M4500q Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-6188	9.8	1%	Nov 12	The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS versions up to R0FET50W, which may allow for… Affected: All versions, or not specified
CVE-2020-8333	7.8	0%	Sep 24	A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution Affected: before fhkt85a
CVE-2017-3753	6.8	1%	Aug 10	A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc Affected: fhkt66a
CVE-2021-3719	6.7	0%	Nov 12	A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may… Affected: before fhkt86a
CVE-2019-6172	6.4	0%	Nov 12	A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow… Affected: All versions, or not specified
CVE-2019-6170	6.4	0%	Nov 12	A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow… Affected: All versions, or not specified
CVE-2019-6190	5.5	0%	Feb 14	Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause… Affected: before fhkt84a
CVE-2019-6156	3.3	0%	Apr 10	In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash Affected: All versions, or not specified