Lenovo Thinkpad t540 Firmware vulnerabilities

2 CVEs affecting Lenovo Thinkpad t540 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8323, published 2020-06-09.

More from Lenovo.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-16098, published 2019-01-24. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. In some Lenovo ThinkPads, an unquoted search path vulnerability was found in various versions of the Synaptics Pointing Device driver which could allow unauthorized code execution as a low privilege…
• CVE-2020-8323, published 2020-06-09. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A potential vulnerability in the SMI callback function used in the Legacy SD driver in some Lenovo ThinkPad, ThinkStation, and Lenovo Notebook models may allow arbitrary code execution.