Thinkpad X1 Carbon Gen 6 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3786 Nov 12, 22:15 MEDIUM PATCH This Month

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Lenovo Thinkpad L380 Firmware Thinkpad E480 Firmware Thinkpad E580 Firmware +130

NVD

CVSS 3.1

5.5

EPSS

0.2%

CVE-2021-3599 Nov 12, 22:15 MEDIUM PATCH This Month

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.

RCE Lenovo Thinkpad L380 Firmware Thinkpad E480 Firmware Thinkpad E580 Firmware +130

NVD

CVSS 3.1

6.7

EPSS

0.3%

CVE-2021-3786

EPSS 0% CVSS 5.5

MEDIUM PATCH This Month

Information Disclosure Lenovo Thinkpad L380 Firmware +132

NVD

CVE-2021-3599

EPSS 0% CVSS 6.7

MEDIUM PATCH This Month

RCE Lenovo Thinkpad L380 Firmware +132

NVD