Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2019-6171

A vulnerability was reported in various BIOS versions of older ThinkPad systems that could allow a user with administrative privileges or physical access the ability to update the Embedded Controller with unsigned firmware.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Lenovo
Products
20a7 20a7 Firmware 20a8 and 293 more
CVE-2018-9062

BIOS Modules Unprotected by Intel Boot Guard Vulnerable to Physical Attack

In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Lenovo
Products
20hm 20hn 20hq and 94 more