GCVE - cpe:2.3:a:lenovo:thinkpad:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lenovo:thinkpad:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Thinkpad (`abd1caa3-81d1-50fb-9429-59cba46c332c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-4030`	vulnerable	2026-06-08 06:16:11.162204	Details available HIGH (8.4) A vulnerability was reported in BIOS for ThinkPad P14s Gen 2, P15s Gen 2, T14 Gen 2, and T15 Gen 2 that could cause the system to recover to insecure settings if the BIOS becomes corrupt. Published: 2023-08-17T16:48:47.172Z Updated: 2024-10-08T13:11:13.980Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-134879	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-4029`	vulnerable	2026-06-08 06:16:11.101414	Details available MEDIUM (6.7) A buffer overflow has been identified in the BoardUpdateAcpiDxe driver in some Lenovo ThinkPad products which may allow an attacker with local access and elevated privileges to execute arbitrary code. Published: 2023-08-17T16:48:24.711Z Updated: 2024-10-08T13:16:40.566Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-134879	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-2290`	vulnerable	2026-06-08 06:02:41.844432	Details available MEDIUM (6.4) A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code. Published: 2023-06-26T19:44:19.989Z Updated: 2024-12-03T18:40:33.407Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-106014	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-8341`	vulnerable	2026-06-08 05:27:16.426716	Details available In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). After resuming from S3 sleep mode in various versions of BIOS for some Lenovo ThinkPad systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected. Published: 2020-09-01T21:30:16.648Z Updated: 2024-09-16T23:16:41.057Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-30042	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6172`	vulnerable	2026-06-08 05:14:09.801070	Details available MEDIUM (6.4) A potential vulnerability in the SMI callback function used in Legacy USB driver using passed parameter without sufficient checking in some Lenovo ThinkPad models may allow arbitrary code execution. Published: 2019-11-12T20:40:53.000Z Updated: 2024-08-04T20:16:23.751Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-27714	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6170`	vulnerable	2026-06-08 05:14:09.231168	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.