Thinkpad X1 Extreme Gen 5 Firmware CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2023-2290

A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed

Vendors

Lenovo

Products

Thinkpad E14 Thinkpad E14 Firmware Thinkpad E14 Gen2 and 168 more

CVE-2022-4574

An SMI handler input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Lenovo

Products

Thinkpad L14 Thinkpad L14 Firmware Thinkpad L14 Gen 2 and 105 more

CVE-2022-48189

An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.

CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Lenovo

Products

Thinkpad E14 Thinkpad E14 Firmware Thinkpad E14 Gen 2 and 167 more

Page 1 of 1.