threat
engine
.sh
Back
·
··:··
Home
/
Product
/
lenovo thinkpad x1 tablet firmware
Product
lenovo thinkpad x1 tablet firmware
12 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2019-19705
< 6.0.8882.1
Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH
7.8
HIGH
CVE-2021-3786
< n1let92w
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems cou
4.4
MEDIUM
CVE-2021-3599
< n1let92w
A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attacker w
6.7
MEDIUM
CVE-2019-18619
< 5.5.40.1058
Incorrect parameter validation in the synaTee component of Synaptics WBF drivers using an SGX enclave (all versions prior to 2019-
7.8
HIGH
CVE-2019-18618
< 5.5.40.1058
Incorrect access control in the firmware of Synaptics VFS75xx family fingerprint sensors that include external flash (all versions
6.0
MEDIUM
CVE-2020-8323
< 2020-07-24
A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Len
6.4
MEDIUM
CVE-2020-8320
< 2020-07-24
An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege.
6.4
MEDIUM
CVE-2019-6188
all versions
The BIOS tamper detection mechanism was not triggered in Lenovo ThinkPad T460p, BIOS versions up to R07ET90W, and T470p, BIOS vers
9.8
CRITICAL
CVE-2019-6172
all versions
A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checkin
6.4
MEDIUM
CVE-2019-6170
all versions
A potential vulnerability in the SMI callback function used in the Legacy USB driver using boot services structure in runtime phas
6.4
MEDIUM
CVE-2019-10724
< 6.0.1.8642
There is a vulnerability with the Dolby DAX2 API system services in which a low-privileged user can terminate arbitrary processes
6.5
MEDIUM
CVE-2018-9062
< n1oet45w
In some Lenovo ThinkPad products, one BIOS region is not properly included in the checks, allowing injection of arbitrary code.
6.8
MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin