Lenovo

Thinkstation P720 Firmware

7 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.4

CVE-2022-40136

  • EPSS 0.04%
  • Published 30.01.2023 22:15:12
  • Last modified 21.11.2024 07:20:56

An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

6.9

CVE-2021-3519

  • EPSS 0.03%
  • Published 12.11.2021 22:15:07
  • Last modified 21.11.2024 06:21:44

A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes.

6.7

CVE-2020-8321

  • EPSS 0.14%
  • Published 09.06.2020 20:15:22
  • Last modified 21.11.2024 05:38:42

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution.

5.5

CVE-2019-6190

  • EPSS 0.12%
  • Published 14.02.2020 17:15:12
  • Last modified 21.11.2024 04:46:08

Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on sy...

7.4

CVE-2019-0130

  • EPSS 1.38%
  • Published 13.06.2019 16:29:00
  • Last modified 21.11.2024 04:16:17

Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.

3.3

CVE-2019-6156

  • EPSS 0.04%
  • Published 10.04.2019 17:29:00
  • Last modified 21.11.2024 04:46:02

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resum...

7.8

CVE-2019-0135

  • EPSS 0.1%
  • Published 14.03.2019 20:29:01
  • Last modified 21.11.2024 04:16:18

Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206