Search Results (4 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-3599 1 Lenovo 266 Ideapad S940-14iwl, Ideapad S940-14iwl Firmware, Ideapad Yoga S940-14iwl and 263 more 2024-11-21 6.7 Medium
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2020-8336 1 Lenovo 76 Thinkpad E14, Thinkpad E14 Firmware, Thinkpad E15 and 73 more 2024-11-21 6.4 Medium
Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.
CVE-2020-8323 1 Lenovo 344 14iwl, 14iwl Firmware, 330-14ast and 341 more 2024-11-21 6.4 Medium
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
CVE-2020-8320 1 Lenovo 200 Thinkpad 11e, Thinkpad 11e Firmware, Thinkpad 11e Yoga Gen 6 and 197 more 2024-11-21 6.4 Medium
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.