Lenovo Thinkcentre M920Z Firmware vulnerabilities

CVE-2022-48181 [HIGH] CWE-787 CVE-2022-48181: An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models cou An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.

CVE-2022-48188 [HIGH] CWE-787 CVE-2022-48188: A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkSta A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.

CVE-2020-8353 [MEDIUM] CWE-16 CVE-2020-8353: Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Prior to August 10, 2020, some Lenovo Desktop and Workstation systems were shipped with the Embedded Host Based Configuration (EHBC) feature of Intel AMT enabled. This could allow an administrative user with local access to configure Intel AMT.

CVE-2019-6190 [MEDIUM] CWE-665 CVE-2019-6190: Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BI Lenovo was notified of a potential denial of service vulnerability, affecting various versions of BIOS for Lenovo Desktop, Desktop - All in One, and ThinkStation, that could cause PCRs to be cleared intermittently after resuming from sleep (S3) on systems with Intel TXT enabled.