threat
engine
.sh
Back
·
··:··
Home
/
Product
/
lenovo thinkcentre m710q firmware
Product
lenovo thinkcentre m710q firmware
10 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2022-40136
< m1akt56a
An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an a
4.4
MEDIUM
CVE-2022-40135
< m1akt56a
An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local a
4.4
MEDIUM
CVE-2022-40134
all versions
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local
4.4
MEDIUM
CVE-2019-19705
< 6.0.8924.1
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH
7.8
HIGH
CVE-2021-4211
all versions
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, a
6.7
MEDIUM
CVE-2019-6190
< m1akt47a
Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop
5.0
MEDIUM
CVE-2019-6188
all versions
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS vers
9.8
CRITICAL
CVE-2019-6172
all versions
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checkin
6.4
MEDIUM
CVE-2019-6170
all versions
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phas
6.4
MEDIUM
CVE-2019-6156
< m1akt3fa
In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an
3.3
LOW
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin