Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

lenovo thinkpad t470 firmware vulnerabilities and exploits

(subscribe to this query)
6.7
CVSSv3

CVE-2022-4575

A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.
Lenovo Thinkpad 25 FirmwareLenovo Thinkpad L560 FirmwareLenovo Thinkpad P50 FirmwareLenovo Thinkpad P50s FirmwareLenovo Thinkpad P70 FirmwareLenovo Thinkpad T470 FirmwareLenovo Thinkpad T470s FirmwareLenovo Thinkpad T560 FirmwareLenovo Thinkpad X1 Carbon 4th Gen FirmwareLenovo Thinkpad X1 Yoga 1st Gen FirmwareLenovo Thinkpad X260 FirmwareLenovo Thinkpad X270 FirmwareLenovo Thinkpad Yoga 260 Firmware
6.8
CVSSv3

CVE-2018-9062

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
Lenovo E42-80 FirmwareLenovo E42-80 Isk FirmwareLenovo E52-80 FirmwareLenovo E52-80 Isk FirmwareLenovo Miix 720-12ikb FirmwareLenovo V310-14ikb FirmwareLenovo V310-14isk FirmwareLenovo V310-15ikb FirmwareLenovo V310-15isk FirmwareLenovo V510-14ikb FirmwareLenovo V510-15ikb FirmwareLenovo Thinkpad L380 FirmwareLenovo Thinkpad E480 FirmwareLenovo Thinkpad E580 FirmwareLenovo Thinkpad L480 FirmwareLenovo Thinkpad L580 FirmwareLenovo Thinkpad P51 FirmwareLenovo Thinkpad P51s FirmwareLenovo Thinkpad P52 FirmwareLenovo Thinkpad P52s FirmwareLenovo Thinkpad P71 FirmwareLenovo Thinkpad P72 Firmware
7.8
CVSSv3

CVE-2018-16098

In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege user.
Lenovo Synaptics Thinkpad Ultranav Driver 18.0.7.119Lenovo Synaptics Thinkpad Ultranav Driver 19.5.19.33Lenovo Synaptics Thinkpad Ultranav Driver 19.0.17.140Lenovo Synaptics Thinkpad Ultranav Driver 19.3.4.219Lenovo Synaptics Thinkpad Ultranav Driver 16.2.19.23Lenovo Synaptics Thinkpad Ultranav Driver 18.1.27.42Lenovo Thinkpad Helix Firmware -Lenovo Thiankpad L430 Firmware -Lenovo Thiankpad L530 Firmware -Lenovo Thiankpad P1 Firmware -Lenovo Thiankpad X1 Extreme Firmware -Lenovo Thiankpad P50s Firmware -Lenovo Thiankpad P51 Firmware -Lenovo Thiankpad P51s Firmware -Lenovo Thiankpad P52s Firmware -Lenovo Thiankpad P70 Firmware -Lenovo Thiankpad S1 Yoga Firmware -Lenovo Thiankpad S430 Firmware -Lenovo Thiankpad T420 Firmware -Lenovo Thiankpad T420i Firmware -Lenovo Thinkpad T420s Firmware -Lenovo Thinkpad T420si Firmware -
6.8
CVSSv3

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
Lenovo Thinkpad 11e Yoga Gen 6 FirmwareLenovo Thinkpad 11e FirmwareLenovo Thinkpad Yoga 11e 3rd Gen FirmwareLenovo Thinkpad Yoga 11e 4th Gen FirmwareLenovo Thinkpad Yoga 11e 5th Gen FirmwareLenovo Thinkpad 13 2nd Gen FirmwareLenovo Thinkpad 13 FirmwareLenovo Thinkpad A275 FirmwareLenovo Thinkpad A285 FirmwareLenovo Thinkpad A475 FirmwareLenovo Thinkpad A485 FirmwareLenovo Thinkpad E14 FirmwareLenovo Thinkpad E15 FirmwareLenovo Thinkpad R14 FirmwareLenovo Thinkpad S3 Gen 2 FirmwareLenovo Thinkpad E455 FirmwareLenovo Thinkpad E555 FirmwareLenovo Thinkpad E460 FirmwareLenovo Thinkpad E560 FirmwareLenovo Thinkpad E465 FirmwareLenovo Thinkpad E565 FirmwareLenovo Thinkpad E470 Firmware
6.5
CVSSv3

CVE-2019-10724

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO51...
Lenovo Legion Y520t Z370 FirmwareLenovo Aio310-20iap FirmwareLenovo Aio510-22ish FirmwareLenovo Aio510-23ish FirmwareLenovo Aio520-22ikl FirmwareLenovo Aio520-22iku FirmwareLenovo Aio520-24ikl FirmwareLenovo Aio520-24iku FirmwareLenovo Aio520-27ikl FirmwareLenovo Aio720-24ikb FirmwareLenovo Ideacentre 520s-23iku FirmwareLenovo Thinkcentre M700z FirmwareLenovo Thinkcentre M800z FirmwareLenovo Thinkcentre M810z FirmwareLenovo Thinkcentre M818z FirmwareLenovo Thinkcentre M900z FirmwareLenovo Thinkcentre M910z FirmwareLenovo V410z(yt S4250) FirmwareLenovo 100e 2nd Gen Firmware -Lenovo 300e 2nd Gen Firmware -Lenovo 330-14ikbr FirmwareLenovo 330-15ikbr Firmware
6.7
CVSSv3

CVE-2021-3599

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Lenovo Thinkpad X380 Yoga FirmwareLenovo Thinkpad X1 Fold Gen 1 FirmwareLenovo Thinkpad Yoga 260 FirmwareLenovo Thinkpad Yoga 11e 3rd Gen FirmwareLenovo Thinkpad Yoga 15 FirmwareLenovo Thinkpad Yoga 370 FirmwareLenovo Thinkpad X12 Detachable Gen 1 FirmwareLenovo Thinkpad X390 FirmwareLenovo Thinkpad Yoga 11e 4th Gen FirmwareLenovo Thinkpad Yoga 11e 5th Gen FirmwareLenovo Thinkpad X250 FirmwareLenovo Thinkpad X260 FirmwareLenovo Thinkpad X390 Yoga FirmwareLenovo Thinkpad X280 FirmwareLenovo Thinkpad X1 Titanium FirmwareLenovo Thinkpad X270 FirmwareLenovo Thinkpad X1 Carbon 5th Gen Kabylake FirmwareLenovo Thinkpad X13 Gen 1 FirmwareLenovo Thinkpad X13 Gen 2 FirmwareLenovo Thinkpad X13 Yoga Gen 1 FirmwareLenovo Thinkpad X13 Yoga Gen 2 FirmwareLenovo Thinkpad X1 Carbon 5th Gen Skylake Firmware
5.5
CVSSv3

CVE-2021-3786

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
Lenovo Thinkpad X380 Yoga FirmwareLenovo Thinkpad X1 Fold Gen 1 FirmwareLenovo Thinkpad Yoga 260 FirmwareLenovo Thinkpad Yoga 11e 3rd Gen FirmwareLenovo Thinkpad Yoga 15 FirmwareLenovo Thinkpad Yoga 370 FirmwareLenovo Thinkpad X12 Detachable Gen 1 FirmwareLenovo Thinkpad X390 FirmwareLenovo Thinkpad Yoga 11e 4th Gen FirmwareLenovo Thinkpad Yoga 11e 5th Gen FirmwareLenovo Thinkpad X250 FirmwareLenovo Thinkpad X260 FirmwareLenovo Thinkpad X390 Yoga FirmwareLenovo Thinkpad X280 FirmwareLenovo Thinkpad X1 Titanium FirmwareLenovo Thinkpad X270 FirmwareLenovo Thinkpad X1 Carbon 5th Gen Kabylake FirmwareLenovo Thinkpad X13 Gen 1 FirmwareLenovo Thinkpad X13 Gen 2 FirmwareLenovo Thinkpad X13 Yoga Gen 1 FirmwareLenovo Thinkpad X13 Yoga Gen 2 FirmwareLenovo Thinkpad X1 Carbon 5th Gen Skylake Firmware
6.7
CVSSv3

CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
Lenovo 330-14ast Firmware -Lenovo 330-15ast Firmware -Lenovo 330-17ast Firmware -Lenovo 340c-15api Firmware -Lenovo 340c-15ast Firmware -Lenovo 720s Touch-15ikb Firmware -Lenovo 720s-15ikb Firmware -Lenovo 730s-13iwl Firmware -Lenovo C640-iml Firmware -Lenovo E42-80 Firmware -Lenovo E52-80 Firmware -Lenovo K22-80 Firmware -Lenovo V720-12 Firmware -Lenovo K32-80 Kbl Firmware -Lenovo K32-80 Skl Firmware -Lenovo Miix 720-12ikb Firmware -Lenovo S145-14api Firmware -Lenovo S145-14ast Firmware -Lenovo S145-15api Firmware -Lenovo S145-15ast Firmware -Lenovo S540-13api Firmware -Lenovo S750-iil Firmware -
7.8
CVSSv3

CVE-2019-18619

Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions before 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid p...
Synaptics Vfs75xx Firmware 5.2.225.26Synaptics Vfs75xx Firmware 5.2.318.26Synaptics Vfs75xx Firmware 5.2.524.26Synaptics Vfs75xx Firmware 5.2.3530.26Synaptics Vfs75xx Firmware 5.3.3539.26Synaptics Vfs75xx Firmware 5.5.3.1116Synaptics Vfs75xx Firmware 5.5.8.1096Synaptics Vfs75xx Firmware 5.5.10.1093Synaptics Vfs75xx Firmware 5.5.11.1106Synaptics Vfs75xx Firmware 5.5.15.1102Synaptics Vfs75xx Firmware 5.5.38.1058Synaptics Vfs75xx Firmware 5.5.2734.1050Synaptics Vfs75xx Firmware 5.5.2811.1050Synaptics Vfs75xx Firmware 5.6.23.1000Synaptics Vfs75xx Firmware 6.0.14.1108Synaptics Vfs75xx Firmware 6.0.32.1104Synaptics Vfs75xx Firmware 6.0.42.1107Lenovo Thinkpad 25 FirmwareLenovo Thankpad A475 FirmwareLenovo Thankpad A485 FirmwareLenovo Thinkpad E480 FirmwareLenovo Thinkpad E580 Firmware
7.8
CVSSv3

CVE-2019-19705

Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT prior to 6.0.8882.1 and 20KH and 20KG prior to 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.
Lenovo Ideacentre 510-15ikl FirmwareLenovo Ideacentre 510s-08ikl FirmwareLenovo Ideacentre 300s-11ish FirmwareLenovo Ideacentre 310-15asr FirmwareLenovo Ideacentre 310-15iap FirmwareLenovo Ideacentre 310a-15iap FirmwareLenovo Ideacentre 310s-08iap FirmwareLenovo Ideacentre 510-15abr FirmwareLenovo Ideacentre 510s-08ish FirmwareLenovo Ideacentre 610s-02ish FirmwareLenovo Ideacentre 620s-03ikl FirmwareLenovo Ideacentre 700 FirmwareLenovo Ideacentre 720-18asr FirmwareLenovo Legion Y520t Z370 FirmwareLenovo Legion Y720 Tower FirmwareLenovo Legion Y720t Amd FirmwareLenovo Legion Y920 Tower FirmwareLenovo Lenovo V320-15iap FirmwareLenovo Thinkcentre E74s FirmwareLenovo Yangtian Mc H110 FirmwareLenovo Yangtian Me/we H110 FirmwareLenovo Yangtian Tc/wc H110 Pci Firmware
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
buffer overflowtype confusionserver-side request forgeryCVE-2024-38440CVE-2024-27801CVE-2024-5868CVE-2024-0582CVE-2024-37643CVE-2024-3105
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook