Lenovo v410z Firmware vulnerabilities

3 CVEs affecting Lenovo v410z Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-4211, published 2022-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6190, published 2020-02-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared…
CVE-2021-4211, published 2022-04-22. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and…
CVE-2021-4210, published 2022-04-22. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. A potential vulnerability in the SMI callback function used in the NVME driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated…