Thinkpad S3 Gen 2 Firmware

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-8336 MEDIUM This Month

Lenovo implemented Intel CSME Anti-rollback ARB protections on some ThinkPad models to prevent roll back of CSME Firmware in flash. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Lenovo Intel Information Disclosure Thinkpad E14 Firmware Thinkpad E15 Firmware +36

NVD

CVSS 3.1

6.8

EPSS

0.3%

CVE-2020-8323 MEDIUM This Month

A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Lenovo 330 14Ast Firmware 330 15Ast Firmware 330 17Ast Firmware +169

NVD

CVSS 3.1

6.7

EPSS

0.3%

CVE-2020-8320 MEDIUM This Month

An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. Rated medium severity (CVSS 6.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Privilege Escalation Thinkpad 11E Yoga Gen 6 Firmware Thinkpad 11E Firmware Thinkpad Yoga 11E 3Rd Gen Firmware Thinkpad Yoga 11E 4Th Gen Firmware +96

NVD

CVSS 3.1

6.8

EPSS

0.3%

CVE-2020-8336

EPSS 0% CVSS 6.8

MEDIUM This Month

Lenovo Intel Information Disclosure +38

NVD

CVE-2020-8323

EPSS 0% CVSS 6.7

MEDIUM This Month

RCE Lenovo 330 14Ast Firmware +171

NVD

CVE-2020-8320

EPSS 0% CVSS 6.8

MEDIUM This Month

Privilege Escalation Thinkpad 11E Yoga Gen 6 Firmware Thinkpad 11E Firmware +98

NVD