GCVE - cpe:2.3:o:lenovo:thinkcentre_m910q_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:lenovo:thinkcentre_m910q_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Thinkcentre M910Q Firmware (`8b0b8f16-debd-5f36-9341-e542c63e903c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-40136`	vulnerable	2026-06-08 05:48:23.648928	Details available MEDIUM (4.4) An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. Published: 2023-01-30T21:20:45.280Z Updated: 2025-03-27T15:25:10.981Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-94953	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-40135`	vulnerable	2026-06-08 05:48:23.527119	Details available MEDIUM (4.4) An information leak vulnerability in the Smart USB Protection SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. Published: 2023-01-30T21:20:33.347Z Updated: 2025-03-27T15:26:04.196Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-94953	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6190`	vulnerable	2026-06-08 05:14:10.204690	Details available MEDIUM (5) Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled. Published: 2020-02-14T17:10:26.285Z Updated: 2024-09-16T22:31:10.172Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-28078	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6156`	vulnerable	2026-06-08 05:14:08.960167	Details available In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected. Published: 2019-04-10T17:04:19.908Z Updated: 2024-09-16T22:02:37.776Z Open on db.gcve.eu Reference links https://support.lenovo.com/solutions/LEN-26332	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19705`	vulnerable	2026-06-08 05:13:23.346242	Details available Realtek Audio Drivers for Windows, as used on the Lenovo ThinkPad X1 Carbon 20A7, 20A8, 20BS, and 20BT before 6.0.8882.1 and 20KH and 20KG before 6.0.8907.1 (and on many other Lenovo and non-Lenovo products), mishandles DLL preloading. Published: 2022-12-26T00:00:00.000Z Updated: 2025-04-14T17:05:23.684Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/ps500315-realtek-audio-driver-vulnerability	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.