Known Vulnerabilities for Thinkpad Yoga 370 by Lenovo
Listed below are 10 of the newest known vulnerabilities associated with "Thinkpad Yoga 370" by "Lenovo".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
More device details and information can be found at device.report here: Lenovo Thinkpad Yoga 370
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-3843 json | A potential vulnerability in the SMI function to access EEPROM in some ThinkPad models may allow an attacker with local acces... | 6.7 - MEDIUM | 2021-11-12 | 2021-11-23 |
| CVE-2021-3786 json | A potential vulnerability in the SMI callback function used in CSME configuration of some Lenovo Notebook and ThinkPad system... | 5.5 - MEDIUM | 2021-11-12 | 2021-11-26 |
| CVE-2021-3718 json | A denial of service vulnerability was reported in some ThinkPad models that could cause a system to crash when the Enhanced B... | 4.6 - MEDIUM | 2021-11-12 | 2021-11-23 |
| CVE-2021-3599 json | A potential vulnerability in the SMI callback function used to access flash device in some ThinkPad models may allow an attac... | 6.7 - MEDIUM | 2021-11-12 | 2021-11-24 |
| CVE-2021-3463 json | A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that ... | 4.4 - MEDIUM | 2021-04-13 | 2021-04-23 |
| CVE-2021-3462 json | A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that coul... | 7.8 - HIGH | 2021-04-13 | 2022-10-27 |
| CVE-2021-3452 json | A potential vulnerability in the system shutdown SMI callback function in some ThinkPad models may allow an attacker with loc... | 6.7 - MEDIUM | 2021-07-16 | 2021-07-27 |
| CVE-2020-8337 json | An unquoted search path vulnerability was reported in versions prior to 1.0.83.0 of the Synaptics Smart Audio UWP app associa... | 6.7 - MEDIUM | 2020-06-09 | 2020-06-19 |
| CVE-2020-8323 json | A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, an... | 6.7 - MEDIUM | 2020-06-09 | 2020-06-22 |
| CVE-2020-8320 json | An internal shell was included in BIOS image in some ThinkPad models that could allow escalation of privilege. | 6.8 - MEDIUM | 2020-06-09 | 2020-06-17 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Lenovo | Thinkpad Yoga 370 | - |