Ideacentre 520S 23Iku Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-10724 Aug 29, 00:15 MEDIUM This Month

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Lenovo Thinkcentre M700Z Firmware Thinkcentre M800Z Firmware Thinkcentre M810Z Firmware +105

NVD

CVSS 3.0

6.5

EPSS

1.2%

CVE-2019-6156 Apr 10, 17:29 LOW PATCH Monitor

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Lenovo Thinkcentre E75S Firmware Ideacentre 300 20Ish Firmware Ideacentre 300S 11Ish Firmware +174

NVD

CVSS 3.0

3.3

EPSS

0.2%

CVE-2019-10724

EPSS 1% CVSS 6.5

MEDIUM This Month

Information Disclosure Lenovo Thinkcentre M700Z Firmware +107

NVD

CVE-2019-6156

EPSS 0% CVSS 3.3

LOW PATCH Monitor

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Information Disclosure Lenovo Thinkcentre E75S Firmware +176

NVD