Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-01-30	CVE-2022-40134	Out-of-bounds Read vulnerability in Lenovo products An information leak vulnerability in the SMI Set BIOS Password SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. local low complexity lenovo CWE-125	4.4
2023-01-30	CVE-2022-40136	Out-of-bounds Read vulnerability in Lenovo products An information leak vulnerability in SMI Handler used to configure platform settings over WMI in some Lenovo models may allow an attacker with local access and elevated privileges to read SMM memory. local low complexity lenovo CWE-125	4.4
2021-11-12	CVE-2021-3519	Improper Authentication vulnerability in Lenovo products A vulnerability was reported in some Lenovo Desktop models that could allow unauthorized access to the boot menu, when the "BIOS Password At Boot Device List" BIOS setting is Yes. low complexity lenovo CWE-287	6.8
2020-11-11	CVE-2020-8353	Unspecified vulnerability in Lenovo products Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. local low complexity lenovo	6.7