cve.bz

lenovo ideacentre 300-20ish firmware vulnerabilities, newest first

Filter
  1. 3.3CVE-2019-6156EPSS 0.2%

    In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that …

  2. 6.8CVE-2017-3753EPSS 0.5%

    A vulnerability has been identified in some Lenovo products that use UEFI (BIOS) code developed by American Megatrends, Inc. (AMI). With this vulnerability, conditions exist where an attacker with administrative privileges or physical acce…