Thinkpad S2 Yoga 4th Gen Firmware Security Vulnerabilities and Issues — Thinkpad S2 Yoga 4th Gen Firmware CVE List

Lucene search

LenovoThinkpad S2 Yoga 4th Gen Firmware

5 matches found

CVE•added 2019/11/12 9:15 p.m.•99 views

CVE-2019-6170

A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phase in some Lenovo ThinkPad models may allow arbitrary code execution.

6.4CVSS7.3AI score0.00074EPSS

CVE•added 2020/06/09 8:15 p.m.•63 views

CVE-2020-8323

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.

6.7CVSS7.1AI score0.0005EPSS

CVE•added 2019/11/12 9:15 p.m.•62 views

CVE-2019-6172

A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution.

6.4CVSS7.3AI score0.00093EPSS

CVE•added 2020/06/09 8:15 p.m.•54 views

CVE-2020-8320

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.

6.8CVSS7AI score0.00047EPSS

CVE•added 2020/06/09 8:15 p.m.•32 views

CVE-2020-8336

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash.

6.8CVSS6.7AI score0.00052EPSS