CVE-2021-3786

CVE-2021-3786 concerns Lenovo notebook/ThinkPad systems with a vulnerable SMI callback in the CSME configuration. The issue is a potential flaw in the SMI callback function that could allow leaking data from the SMRAM range. Public records describe this as a data leakage risk affecting confidenti...

CVE-2021-3719

CVE-2021-3719 concerns a vulnerability in the SMI callback that handles boot script tables for resuming from sleep state on Lenovo ThinkCentre and ThinkStation desktops/workstations. The issue could let an attacker with local access and elevated privileges execute arbitrary code by exploiting the...

PT-2021-21565 · Lenovo · Lenovo Thinkstation +1

Name of the Vulnerable Software and Affected Versions: Lenovo ThinkCentre and ThinkStation models affected versions not specified Description: A potential issue in the SMI callback function that handles boot script tables for resuming from sleep state may allow an attacker with local access and...

PT-2021-20533

Name of the Vulnerable Software and Affected Versions: ThinkPad models affected versions not specified Description: A potential issue in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2020-8354

A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8354

A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution...

Code injection

A potential vulnerability in the SMI callback function used in the VariableServiceSmm driver in some Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8354

CVE-2020-8354 affects Lenovo notebook models, where the vulnerability lies in the SMI callback function used by the VariableServiceSmm driver. The issue could allow arbitrary code execution via a local attack that requires high privileges and no user interaction, using the SMI pathway on affected...

CVE-2020-8332

A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and IBM System x servers may allow arbitrary code execution. Servers operating in UEFI mode are not affected...

CVE-2020-8332

The CVE-2020-8332 issue is tied to the SMI callback function in legacy BIOS mode USB drivers on some legacy Lenovo and IBM System x servers. The vulnerability may allow arbitrary code execution, with UEFI-mode systems unaffected. The affected component is the legacy BIOS USB driver stack; root ca...

System Management Mode (SMM) BIOS Vulnerability in some legacy System x servers - Lenovo Support US

Lenovo Security Advisory: LEN-38625 Potential Impact: Privilege escalation Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2020-8332 Summary Description: A potential vulnerability in the SMI callback function used in the legacy BIOS mode USB drivers in some legacy Lenovo and...

CVE-2020-8333

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution...

CVE-2020-8333

A potential vulnerability in the SMI callback function used in the EEPROM driver in some Lenovo Desktops and ThinkStation models may allow arbitrary code execution...

CVE-2020-8333

CVE-2020-8333 describes a vulnerability in the SMI callback function used by the EEPROM driver on some Lenovo Desktops and ThinkStation models, potentially enabling arbitrary code execution. Exploitation would require local access (no user interaction) with low attack complexity, and could impact...

PT-2020-20100

Name of the Vulnerable Software and Affected Versions Lenovo Desktops and ThinkStation models affected versions not specified Description A potential issue in the SMI callback function used in the EEPROM driver may allow arbitrary code execution. Recommendations At the moment, there is no...

CVE-2020-8321

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...

CVE-2020-8323

The CVE-2020-8323 issue affects Lenovo systems (ThinkPad/ThinkStation/Lenovo Notebook) via a vulnerability in the SMI callback function used by the Legacy SD driver. The underlying flaw could allow arbitrary code execution on affected devices. Public details identify the vulnerable component as t...

CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution...

CVE-2020-8322

A potential vulnerability in the SMI callback function used in the Legacy USB driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution...

PT-2020-20089

Name of the Vulnerable Software and Affected Versions Lenovo Notebook and ThinkStation models affected versions not specified Description A potential issue in the SMI callback function used in the Legacy USB driver may allow arbitrary code execution. Recommendations At the moment, there is no...