Lenovo ThinkPad X390
Approved changes feed: RSS · Atom
cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Lenovo (c98ed681-bc65-5c44-8bbb-e0a228f96d0e) |
|---|---|
| Product | Thinkpad X390 (7dc12415-f652-53eb-807d-3a4278becfeb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-2290 |
not_vulnerable | 2026-06-08 06:02:41.978806 |
Details available
MEDIUM (6.4)
A potential vulnerability in the LenovoFlashDeviceInterface SMI handler may allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2023-06-26T19:44:19.989Z
Updated: 2024-12-03T18:40:33.407Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-48189 |
not_vulnerable | 2026-06-08 05:50:41.583574 |
Details available
MEDIUM (6.7)
An SMM driver input validation vulnerability in the BIOS of some ThinkPad models could allow an attacker with local access and elevated privileges to execute arbitrary code.
Published: 2023-10-30T14:39:23.160Z
Updated: 2024-09-09T15:02:40.079Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-40134 |
not_vulnerable | 2026-06-08 05:48:23.336494 |
Details available
MEDIUM (4.4)
An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory.
Published: 2023-01-30T21:20:25.236Z
Updated: 2025-03-27T15:26:52.831Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1107 |
not_vulnerable | 2026-06-08 05:39:12.217245 |
Details available
MEDIUM (6.7)
During an internal product security audit a potential vulnerability due to use of Boot Services in the SmmOEMInt15 SMI handler was discovered in some ThinkPad models could be exploited by an attacker with elevated privileges that could allow for execution of code.
Published: 2022-04-22T20:30:50.000Z
Updated: 2024-08-02T23:55:24.201Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3786 |
not_vulnerable | 2026-06-08 05:33:54.012669 |
Details available
MEDIUM (4.4)
A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad systems could be used to leak out data out of the SMRAM range.
Published: 2021-11-12T22:05:41.000Z
Updated: 2024-08-03T17:09:08.738Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3599 |
not_vulnerable | 2026-06-08 05:33:52.927200 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3463 |
not_vulnerable | 2026-06-08 05:33:52.366881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3462 |
not_vulnerable | 2026-06-08 05:33:52.360675 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8323 |
not_vulnerable | 2026-06-08 05:27:16.087899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-8320 |
not_vulnerable | 2026-06-08 05:27:15.740608 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6192 |
not_vulnerable | 2026-06-08 05:14:10.295883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6188 |
not_vulnerable | 2026-06-08 05:14:10.025411 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6172 |
not_vulnerable | 2026-06-08 05:14:09.848221 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6170 |
not_vulnerable | 2026-06-08 05:14:09.603112 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18619 |
not_vulnerable | 2026-06-08 05:13:11.902939 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-18618 |
not_vulnerable | 2026-06-08 05:13:11.790535 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.