High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-05	CVE-2022-48188	Out-of-bounds Write vulnerability in Lenovo products A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code. local low complexity lenovo CWE-787	7.8
2019-06-13	CVE-2019-0130	Cross-site Scripting vulnerability in multiple products Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access. network low complexity intel lenovo CWE-79	7.4
2019-03-14	CVE-2019-0135	Permissions, Privileges, and Access Controls vulnerability in multiple products Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. local low complexity intel lenovo CWE-264	7.8