Thinkpad X1 Yoga Gen 5 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-3786 MEDIUM PATCH This Month

A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Lenovo Information Disclosure Thinkpad X380 Yoga Firmware Thinkpad X1 Fold Gen 1 Firmware Thinkpad Yoga 260 Firmware +130

NVD

CVSS 3.1

5.5

EPSS

0.2%

CVE-2021-3599 MEDIUM PATCH This Month

A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker with local access and elevated privileges to execute arbitrary code. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.

RCE Thinkpad X380 Yoga Firmware Thinkpad X1 Fold Gen 1 Firmware Thinkpad Yoga 260 Firmware Thinkpad Yoga 11E 3Rd Gen Firmware +129

NVD

CVSS 3.1

6.7

EPSS

0.3%

CVE-2021-3786

EPSS 0% CVSS 5.5

MEDIUM PATCH This Month

Lenovo Information Disclosure Thinkpad X380 Yoga Firmware +132

NVD

CVE-2021-3599

EPSS 0% CVSS 6.7

MEDIUM PATCH This Month

RCE Thinkpad X380 Yoga Firmware Thinkpad X1 Fold Gen 1 Firmware +131

NVD