GCVE - cpe:2.3:o:lenovo:thinkstation_p720_firmware:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:lenovo:thinkstation_p720_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

Vendor	Lenovo (`c98ed681-bc65-5c44-8bbb-e0a228f96d0e`)
Product	Thinkstation P720 Firmware (`1206a54f-32fc-5943-a5a8-1ff7e17a0dd0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-6156`	vulnerable	2026-06-08 05:14:09.078554	Details available In Lenovo systems, SMM BIOS Write Protection is used to prevent writes to SPI Flash. While this provides sufficient protection, an additional layer of protection is provided by SPI Protected Range Registers (PRx). Lenovo was notified that after resuming from S3 sleep mode in various versions of BIOS for Lenovo systems, the PRx is not set. This does not impact the SMM BIOS Write Protection, which keeps systems protected. Published: 2019-04-10T17:04:19.908Z Updated: 2024-09-16T22:02:37.776Z Open on db.gcve.eu Reference links https://support.lenovo.com/solutions/LEN-26332	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0135`	vulnerable	2026-06-08 05:12:17.808839	Details available Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206 Published: 2019-03-14T20:00:00.000Z Updated: 2024-08-04T17:44:14.590Z Open on db.gcve.eu Reference links https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00231.html https://support.lenovo.com/us/en/product_security/LEN-27843	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0130`	vulnerable	2026-06-08 05:12:17.801590	Details available Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access. Published: 2019-06-13T15:36:25.000Z Updated: 2024-08-04T17:44:14.466Z Open on db.gcve.eu Reference links https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00226.html http://www.securityfocus.com/bid/108775 https://support.lenovo.com/us/en/product_security/LEN-27843	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.