TM
Product
Thinkcentre M720q Firmware
9
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 7Low 0
Watch
Add Thinkcentre M720q Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-48188 | 7.8 | Jun 5 | A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their… Affected: before m1ukt70a |
| CVE-2022-48181 | 7.8 | Jun 5 | An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute… Affected: before m1ukt70a |
| CVE-2023-45079 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: before m1ukt72a |
| CVE-2023-45078 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: before m1ukt72a |
| CVE-2023-45077 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: before m1ukt72a |
| CVE-2023-45076 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: before m1ukt72a |
| CVE-2023-45075 | 6.7 | Nov 8 | A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables Affected: before m1ukt72a |
| CVE-2022-40136 | 4.4 | Jan 30 | An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges… Affected: before m1ukt67a |
| CVE-2022-40135 | 4.4 | Jan 30 | An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory Affected: before m1ukt67a |
Showing 9