Thinkpad S2 Yoga Gen 7 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5078 MEDIUM This Month

A vulnerability was reported in some ThinkPad BIOS that could allow a physical or local attacker with elevated privileges to tamper with BIOS firmware. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Thinkpad X13 Gen 3 Firmware Thinkpad S2 Yoga Gen 7 Firmware Thinkpad S2 Yoga Gen 6 Firmware Thinkpad S2 Gen 8 Firmware +16

NVD

CVSS 3.1

6.7

EPSS

0.2%

CVE-2023-4029 MEDIUM This Month

A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow RCE Lenovo K14 Type 21Cu Firmware K14 Type 21Cv Firmware +24

NVD

CVSS 3.1

6.7

EPSS

0.2%

CVE-2023-5078

EPSS 0% CVSS 6.7

MEDIUM This Month

Information Disclosure Thinkpad X13 Gen 3 Firmware Thinkpad S2 Yoga Gen 7 Firmware +18

NVD

CVE-2023-4029

EPSS 0% CVSS 6.7

MEDIUM This Month

Buffer Overflow RCE Lenovo +26

NVD