Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

lenovo thinkpad x270 firmware vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2022-4575
A vulnerability due to improper write protection of UEFI variables was reported in the BIOS of some ThinkPad models could allow an attacker with physical or local access and elevated privileges the ability to bypass Secure Boot.
Lenovo Thinkpad 25 FirmwareLenovo Thinkpad L560 FirmwareLenovo Thinkpad P50 FirmwareLenovo Thinkpad P50s FirmwareLenovo Thinkpad P70 FirmwareLenovo Thinkpad T470 FirmwareLenovo Thinkpad T470s FirmwareLenovo Thinkpad T560 FirmwareLenovo Thinkpad X1 Carbon 4th Gen FirmwareLenovo Thinkpad X1 Yoga 1st Gen FirmwareLenovo Thinkpad X260 FirmwareLenovo Thinkpad X270 FirmwareLenovo Thinkpad Yoga 260 Firmware
641
VMScore
CVE-2018-9062
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
Lenovo E42-80 FirmwareLenovo E42-80 Isk FirmwareLenovo E52-80 FirmwareLenovo E52-80 Isk FirmwareLenovo Miix 720-12ikb FirmwareLenovo V310-14ikb FirmwareLenovo V310-14isk FirmwareLenovo V310-15ikb FirmwareLenovo V310-15isk FirmwareLenovo V510-14ikb FirmwareLenovo V510-15ikb FirmwareLenovo Thinkpad L380 FirmwareLenovo Thinkpad E480 FirmwareLenovo Thinkpad E580 FirmwareLenovo Thinkpad L480 FirmwareLenovo Thinkpad L580 FirmwareLenovo Thinkpad P51 FirmwareLenovo Thinkpad P51s FirmwareLenovo Thinkpad P52 FirmwareLenovo Thinkpad P52s FirmwareLenovo Thinkpad P71 FirmwareLenovo Thinkpad P72 Firmware
409
VMScore
CVE-2020-8320
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
Lenovo Thinkpad 11e Yoga Gen 6 FirmwareLenovo Thinkpad 11e FirmwareLenovo Thinkpad Yoga 11e 3rd Gen FirmwareLenovo Thinkpad Yoga 11e 4th Gen FirmwareLenovo Thinkpad Yoga 11e 5th Gen FirmwareLenovo Thinkpad 13 2nd Gen FirmwareLenovo Thinkpad 13 FirmwareLenovo Thinkpad A275 FirmwareLenovo Thinkpad A285 FirmwareLenovo Thinkpad A475 FirmwareLenovo Thinkpad A485 FirmwareLenovo Thinkpad E14 FirmwareLenovo Thinkpad E15 FirmwareLenovo Thinkpad R14 FirmwareLenovo Thinkpad S3 Gen 2 FirmwareLenovo Thinkpad E455 FirmwareLenovo Thinkpad E555 FirmwareLenovo Thinkpad E460 FirmwareLenovo Thinkpad E560 FirmwareLenovo Thinkpad E465 FirmwareLenovo Thinkpad E565 FirmwareLenovo Thinkpad E470 Firmware
641
VMScore
CVE-2021-3599
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code.
Lenovo Thinkpad X380 Yoga FirmwareLenovo Thinkpad X1 Fold Gen 1 FirmwareLenovo Thinkpad Yoga 260 FirmwareLenovo Thinkpad Yoga 11e 3rd Gen FirmwareLenovo Thinkpad Yoga 15 FirmwareLenovo Thinkpad Yoga 370 FirmwareLenovo Thinkpad X12 Detachable Gen 1 FirmwareLenovo Thinkpad X390 FirmwareLenovo Thinkpad Yoga 11e 4th Gen FirmwareLenovo Thinkpad Yoga 11e 5th Gen FirmwareLenovo Thinkpad X250 FirmwareLenovo Thinkpad X260 FirmwareLenovo Thinkpad X390 Yoga FirmwareLenovo Thinkpad X280 FirmwareLenovo Thinkpad X1 Titanium FirmwareLenovo Thinkpad X270 FirmwareLenovo Thinkpad X1 Carbon 5th Gen Kabylake FirmwareLenovo Thinkpad X13 Gen 1 FirmwareLenovo Thinkpad X13 Gen 2 FirmwareLenovo Thinkpad X13 Yoga Gen 1 FirmwareLenovo Thinkpad X13 Yoga Gen 2 FirmwareLenovo Thinkpad X1 Carbon 5th Gen Skylake Firmware
187
VMScore
CVE-2021-3786
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
Lenovo Thinkpad X380 Yoga FirmwareLenovo Thinkpad X1 Fold Gen 1 FirmwareLenovo Thinkpad Yoga 260 FirmwareLenovo Thinkpad Yoga 11e 3rd Gen FirmwareLenovo Thinkpad Yoga 15 FirmwareLenovo Thinkpad Yoga 370 FirmwareLenovo Thinkpad X12 Detachable Gen 1 FirmwareLenovo Thinkpad X390 FirmwareLenovo Thinkpad Yoga 11e 4th Gen FirmwareLenovo Thinkpad Yoga 11e 5th Gen FirmwareLenovo Thinkpad X250 FirmwareLenovo Thinkpad X260 FirmwareLenovo Thinkpad X390 Yoga FirmwareLenovo Thinkpad X280 FirmwareLenovo Thinkpad X1 Titanium FirmwareLenovo Thinkpad X270 FirmwareLenovo Thinkpad X1 Carbon 5th Gen Kabylake FirmwareLenovo Thinkpad X13 Gen 1 FirmwareLenovo Thinkpad X13 Gen 2 FirmwareLenovo Thinkpad X13 Yoga Gen 1 FirmwareLenovo Thinkpad X13 Yoga Gen 2 FirmwareLenovo Thinkpad X1 Carbon 5th Gen Skylake Firmware
605
VMScore
CVE-2019-10724
There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. The following are affected products and versions: Legion Y520T_Z370 6.0.1.8642, AIO310-20IAP 6.0.1.8642, AIO51...
Lenovo Legion Y520t Z370 FirmwareLenovo Aio310-20iap FirmwareLenovo Aio510-22ish FirmwareLenovo Aio510-23ish FirmwareLenovo Aio520-22ikl FirmwareLenovo Aio520-22iku FirmwareLenovo Aio520-24ikl FirmwareLenovo Aio520-24iku FirmwareLenovo Aio520-27ikl FirmwareLenovo Aio720-24ikb FirmwareLenovo Ideacentre 520s-23iku FirmwareLenovo Thinkcentre M700z FirmwareLenovo Thinkcentre M800z FirmwareLenovo Thinkcentre M810z FirmwareLenovo Thinkcentre M818z FirmwareLenovo Thinkcentre M900z FirmwareLenovo Thinkcentre M910z FirmwareLenovo V410z(yt S4250) FirmwareLenovo 100e 2nd Gen Firmware -Lenovo 300e 2nd Gen Firmware -Lenovo 330-14ikbr FirmwareLenovo 330-15ikbr Firmware
409
VMScore
CVE-2020-8323
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.
Lenovo 330-14ast Firmware -Lenovo 330-15ast Firmware -Lenovo 330-17ast Firmware -Lenovo 340c-15api Firmware -Lenovo 340c-15ast Firmware -Lenovo 720s Touch-15ikb Firmware -Lenovo 720s-15ikb Firmware -Lenovo 730s-13iwl Firmware -Lenovo C640-iml Firmware -Lenovo E42-80 Firmware -Lenovo E52-80 Firmware -Lenovo K22-80 Firmware -Lenovo V720-12 Firmware -Lenovo K32-80 Kbl Firmware -Lenovo K32-80 Skl Firmware -Lenovo Miix 720-12ikb Firmware -Lenovo S145-14api Firmware -Lenovo S145-14ast Firmware -Lenovo S145-15api Firmware -Lenovo S145-15ast Firmware -Lenovo S540-13api Firmware -Lenovo S750-iil Firmware -
NA
CVE-2019-19705
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT prior to 6.0.8882.1 and 20KH and 20KG prior to 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading.
Lenovo Ideacentre 510-15ikl FirmwareLenovo Ideacentre 510s-08ikl FirmwareLenovo Ideacentre 300s-11ish FirmwareLenovo Ideacentre 310-15asr FirmwareLenovo Ideacentre 310-15iap FirmwareLenovo Ideacentre 310a-15iap FirmwareLenovo Ideacentre 310s-08iap FirmwareLenovo Ideacentre 510-15abr FirmwareLenovo Ideacentre 510s-08ish FirmwareLenovo Ideacentre 610s-02ish FirmwareLenovo Ideacentre 620s-03ikl FirmwareLenovo Ideacentre 700 FirmwareLenovo Ideacentre 720-18asr FirmwareLenovo Legion Y520t Z370 FirmwareLenovo Legion Y720 Tower FirmwareLenovo Legion Y720t Amd FirmwareLenovo Legion Y920 Tower FirmwareLenovo Lenovo V320-15iap FirmwareLenovo Thinkcentre E74s FirmwareLenovo Yangtian Mc H110 FirmwareLenovo Yangtian Me/we H110 FirmwareLenovo Yangtian Tc/wc H110 Pci Firmware
409
VMScore
CVE-2019-18619
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions before 2019-11-15) allows a local user to execute arbitrary code in the enclave (that can compromise confidentiality of enclave data) via APIs that accept invalid p...
Synaptics Vfs75xx Firmware 5.2.225.26Synaptics Vfs75xx Firmware 5.2.318.26Synaptics Vfs75xx Firmware 5.2.524.26Synaptics Vfs75xx Firmware 5.2.3530.26Synaptics Vfs75xx Firmware 5.3.3539.26Synaptics Vfs75xx Firmware 5.5.3.1116Synaptics Vfs75xx Firmware 5.5.8.1096Synaptics Vfs75xx Firmware 5.5.10.1093Synaptics Vfs75xx Firmware 5.5.11.1106Synaptics Vfs75xx Firmware 5.5.15.1102Synaptics Vfs75xx Firmware 5.5.38.1058Synaptics Vfs75xx Firmware 5.5.2734.1050Synaptics Vfs75xx Firmware 5.5.2811.1050Synaptics Vfs75xx Firmware 5.6.23.1000Synaptics Vfs75xx Firmware 6.0.14.1108Synaptics Vfs75xx Firmware 6.0.32.1104Synaptics Vfs75xx Firmware 6.0.42.1107Lenovo Thinkpad 25 FirmwareLenovo Thankpad A475 FirmwareLenovo Thankpad A485 FirmwareLenovo Thinkpad E480 FirmwareLenovo Thinkpad E580 Firmware
320
VMScore
CVE-2019-18618
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions before 2019-11-15) allows a local administrator or physical malicious user to compromise the confidentiality of sensor data via injection of an unver...
Synaptics Vfs75xx Firmware 5.1.5.51Synaptics Vfs75xx Firmware 5.1.337.26Synaptics Vfs75xx Firmware 5.1.3507.26Synaptics Vfs75xx Firmware 5.2.320.26Synaptics Vfs75xx Firmware 5.2.524.26Synaptics Vfs75xx Firmware 5.2.3109.26Synaptics Vfs75xx Firmware 5.2.3530.26Synaptics Vfs75xx Firmware 5.2.5024.26Synaptics Vfs75xx Firmware 5.3.3541.26Synaptics Vfs75xx Firmware 5.5.4.1116Synaptics Vfs75xx Firmware 5.5.8.1092Synaptics Vfs75xx Firmware 5.5.10.1100Synaptics Vfs75xx Firmware 5.5.10.1106Synaptics Vfs75xx Firmware 5.5.17.1099Synaptics Vfs75xx Firmware 5.5.17.1102Synaptics Vfs75xx Firmware 5.5.35.1058Synaptics Vfs75xx Firmware 5.5.502.79Synaptics Vfs75xx Firmware 5.5.512.1051Synaptics Vfs75xx Firmware 5.5.2734.1050Synaptics Vfs75xx Firmware 5.5.2810.1050Lenovo Thinkpad 25 FirmwareLenovo Thankpad A475 Firmware
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23692CVE-2012-1823memory leakCVE-2024-0627CVE-2024-31402privilege escalationCVE-2024-36418remote code executionCVE-2024-27844
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook