Lenovo Legion 5-17ITH6 Firmware

CPE Details

Lenovo Legion 5-17ITH6 Firmware
lenovo
legion_5-17ith6_firmware
-
2023-08-24
13h52 +00:00
2023-08-28
15h45 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:lenovo:legion_5-17ith6_firmware:-:*:*:*:*:*:*:*

Informations

Vendor

lenovo

Product

legion_5-17ith6_firmware

Version

-

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-3746 2023-08-23 19h43 +00:00 A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormally due to an exposed Embedded Controller (EC) interface.
6.7
Moyen
CVE-2022-3745 2023-08-23 19h43 +00:00 A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to view incoming and returned data from SMI.
4.4
Moyen
CVE-2022-3744 2023-08-23 19h43 +00:00 A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.
6.7
Moyen
CVE-2022-3743 2023-08-23 19h42 +00:00 A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enumerate Embedded Controller (EC) commands.
4.4
Moyen
CVE-2022-3742 2023-08-23 19h42 +00:00 A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation.
6.7
Moyen
CVE-2023-34419 2023-08-17 16h49 +00:00 A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code.
6.7
Moyen
CVE-2021-3972 2022-04-22 18h30 +00:00 A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.
6.7
Moyen
CVE-2021-3971 2022-04-22 18h30 +00:00 A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.
6.7
Moyen
CVE-2021-3970 2022-04-22 18h30 +00:00 A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.
6.7
Moyen