VYPR

Thinkcentre X1 Firmware

by Lenovo

CVEs (2)

  • CVE-2021-4210MedApr 22, 2022
    risk 0.44cvss 6.7epss 0.00

    A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code.

  • CVE-2021-3719MedNov 12, 2021
    risk 0.44cvss 6.7epss 0.00

    A potential vulnerability in the SMI callback function that saves and restore boot script tables used for resuming from sleep state in some ThinkCentre and ThinkStation models may allow an attacker with local access and elevated privileges to execute arbitrary code.