Lenovo Legion 5-17ith6 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Lenovo Legion 5-17ith6 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2021-3970 — CVSS 6.7 (medium): A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an…
• CVE-2021-3971 — CVSS 6.7 (medium): A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was…
• CVE-2021-3972 — CVSS 6.7 (medium): A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices' BIOS that was mistakenly…
• CVE-2022-3742 — CVSS 6.7 (medium): A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with…
• CVE-2022-3746 — CVSS 6.7 (medium): A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with…
• CVE-2023-34419 — CVSS 6.7 (medium): A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local…
• CVE-2022-3744 — CVSS 6.7 (medium): A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with…
• CVE-2022-3743 — CVSS 4.4 (medium): A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with…
• CVE-2022-3745 — CVSS 4.4 (medium): A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with…