Skip to main content

Yoga C930 13Ikb Firmware

2 CVEs product

Monthly

CVE-2020-8321 Jun 09, 20:15 MEDIUM This Month

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Lenovo Thinkstation P410 Firmware Thinkstation P500 Firmware Thinkstation P510 Firmware +169
NVD
CVSS 3.1
6.7
EPSS
0.3%
CVE-2019-10724 Aug 29, 00:15 MEDIUM This Month

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Lenovo Thinkcentre M700Z Firmware Thinkcentre M800Z Firmware Thinkcentre M810Z Firmware +105
NVD
CVSS 3.0
6.5
EPSS
1.2%
EPSS 0% CVSS 6.7
MEDIUM This Month

A potential vulnerability in the SMI callback function used in the System Lock Preinstallation driver in some Lenovo Notebook and ThinkStation models may allow arbitrary code execution. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

RCE Lenovo Thinkstation P410 Firmware +171
NVD
EPSS 1% CVSS 6.5
MEDIUM This Month

There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes that are running at a higher privilege. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Lenovo Thinkcentre M700Z Firmware +107
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy