Home/Product/lenovo thinkpad l380 yoga firmware
Product

lenovo thinkpad l380 yoga firmware

11 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2019-19705
< 6.0.8882.1
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH
7.8HIGH
CVE-2021-3843
<= 1.26
A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local access and
6.7MEDIUM
CVE-2021-3786
< 2021-10-31
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems cou
4.4MEDIUM
CVE-2021-3718
<= 1.26
A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced Biomet
4.3MEDIUM
CVE-2021-3599
< 2021-10-31
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker w
6.7MEDIUM
CVE-2020-8323
< 2020-07-10
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Len
6.4MEDIUM
CVE-2020-8320
< 2020-07-10
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
6.4MEDIUM
CVE-2019-6188
all versions
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS vers
9.8CRITICAL
CVE-2019-6172
all versions
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checkin
6.4MEDIUM
CVE-2019-6170
all versions
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phas
6.4MEDIUM
CVE-2019-10724
all versions
There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes
6.5MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin