Ideacentre 520S 23Iku Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-10724 MEDIUM This Month

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Legion Y520T Z370 Firmware Aio310 20Iap Firmware Aio510 22Ish Firmware Aio510 23Ish Firmware +104

NVD

CVSS 3.0

6.5

EPSS

1.2%

CVE-2019-6156 LOW PATCH Monitor

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Lenovo Information Disclosure 510 15Ikl Firmware 510S 08Ikl Firmware Ideacentre 300 20Ish Firmware +174

NVD

CVSS 3.0

3.3

EPSS

0.2%

CVE-2019-10724

EPSS 1% CVSS 6.5

MEDIUM This Month

Information Disclosure Legion Y520T Z370 Firmware Aio310 20Iap Firmware +106

NVD

CVE-2019-6156

EPSS 0% CVSS 3.3

LOW PATCH Monitor

In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Lenovo Information Disclosure 510 15Ikl Firmware +176

NVD