VYPR

Thinkcentre M70t Firmware

by Lenovo

CVEs (24)

  • CVE-2023-43572MedNov 8, 2023
    risk 0.29cvss 4.4epss 0.00

    A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

  • CVE-2023-43568MedNov 8, 2023
    risk 0.29cvss 4.4epss 0.00

    A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.

  • CVE-2022-40136MedJan 30, 2023
    risk 0.29cvss 4.4epss 0.00

    An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

  • CVE-2022-40134MedJan 30, 2023
    risk 0.29cvss 4.4epss 0.00

    An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.

Page 2 of 2