GCVE - cpe:2.3:o:lenovo:thinkstation_p520c_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:lenovo:thinkstation_p520c_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Thinkstation P520C Firmware (`bc5b62d5-f38c-5de7-a36f-f709736e287a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-4210`	vulnerable	2026-06-08 05:38:08.749256	Details available MEDIUM (6.7) A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code. Published: 2022-04-22T20:30:41.000Z Updated: 2024-08-03T17:16:04.261Z Open on db.gcve.eu Reference links https://support.lenovo.com/us/en/product_security/LEN-77639	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6156`	vulnerable	2026-06-08 05:14:09.075201	Details available In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected. Published: 2019-04-10T17:04:19.908Z Updated: 2024-09-16T22:02:37.776Z Open on db.gcve.eu Reference links https://support.lenovo.com/solutions/LEN-26332	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0135`	vulnerable	2026-06-08 05:12:17.808704	Details available Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206 Published: 2019-03-14T20:00:00.000Z Updated: 2024-08-04T17:44:14.590Z Open on db.gcve.eu Reference links https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00231.html https://support.lenovo.com/us/en/product_security/LEN-27843	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0130`	vulnerable	2026-06-08 05:12:17.800452	Details available Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access. Published: 2019-06-13T15:36:25.000Z Updated: 2024-08-04T17:44:14.466Z Open on db.gcve.eu Reference links https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html http://www.securityfocus.com/bid/108775 https://support.lenovo.com/us/en/product_security/LEN-27843	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.