Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-10237

Quick assessment

Affected
Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Lenovo ThinkPad是中国联想（Lenovo）公司的一个便携式计算机。 Lenovo ThinkPad存在加密问题漏洞，该漏洞源于嵌入式控制器固件问题，可能导致具有特权的本地用户对特权内存区域执行任意读写。

CVSS 6.7 · Medium EPSS 0.08% · P0

Affected Version Matrix 95

VendorProduct Version RangeStatus
Lenovo L13 (type 20R3, 20R4) Laptops (ThinkPad) BIOS < 1.45 affected
Lenovo L13 2-in-1 Gen 6 (Type 21R7, 21R8) Laptops (ThinkPad) BIOS < 1.10 affected
Lenovo L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS < 1.24 affected
Lenovo L13 Gen 5 (Type 21LB, 21LC) Laptops (ThinkPad) BIOS < 1.21 affected
Lenovo L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS < 1.15 affected
Lenovo L13 Yoga Gen 3 (Type 21B5, 21B6) Laptop (ThinkPad) BIOS < 1.31 affected
Lenovo L14 Gen 2 (type 20X5, 20X6) Laptop (ThinkPad) BIOS < 1.36 affected
Lenovo L14 Gen 2 Type 20X1 20X2 Laptops (ThinkPad) BIOS < 1.73 affected
Lenovo L14 Gen 3 (type 21C1, 21C2) Laptops (ThinkPad) BIOS < 1.44 affected
Lenovo L14 Gen 3 (type 21C5, 21C6) Laptops (ThinkPad) BIOS < 1.36 affected
Lenovo L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS < 1.34 affected
Lenovo L14 Gen 5 (Type 21L1, 21L2) Laptops (ThinkPad) BIOS < 1.27 affected
Lenovo L14 Gen 6 (Type 21S6, 21S7) Laptops (ThinkPad) BIOS < 1.06 affected
Lenovo L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS < 1.14 affected
Lenovo L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS < 1.27 affected
Lenovo L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS < 1.40 affected
Lenovo L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS < 1.13 affected
Lenovo L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS < 1.53 affected
Lenovo P1 Gen 5 (Type 21DC 21DD) Laptop (ThinkPad) BIOS < 1.30 / 1.15 affected
Lenovo P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS < 1.39 / 1.15 affected
Lenovo P1 Gen 7 (Type 21KV, 21KW) Laptop (ThinkPad) BIOS < 1.18 / 1.14 affected
Lenovo P14s Gen 2 (type 21A0, 21A1) Laptop (ThinkPad) BIOS < 1.33 affected
Lenovo P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS < 1.47 affected
Lenovo P14s Gen 5 (Type 21G2, 21G3) Laptops (ThinkPad) BIOS < 1.26 affected
Lenovo P14s Gen 6 (Type 21QL, 21QM) Laptops (ThinkPad) BIOS < 1.17 affected
Lenovo P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS < UEFI BIOS V1.22/ECP V1.13 affected
Lenovo P15v Gen 3 (Type 21EN 21EM) Laptop (ThinkPad) BIOS ≤ 1.28 affected
Lenovo P16 Gen 1 (Type 21D6, 21D7) Laptop (ThinkPad) BIOS ≤ 1.70 affected
Lenovo P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS < BIOS: 1.99/ ECFW: 1.58 affected
Lenovo P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS < 1.52 affected
Lenovo P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS < BIOS: 1.66 / ECFW: 1.10 affected
Lenovo P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS < 1.65/1.13 affected
Lenovo P16v Gen 2 (Type 21KX, 21KY) Laptops (ThinkPad) BIOS ≤ 1.20 affected
Lenovo P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS ≤ 1.16 affected
Lenovo P17 Gen 2 (type 20YU, 20YV) Laptops (ThinkPad) BIOS ≤ 1.98 affected
Lenovo P73 (type 20QR, 20QS) Laptop (Thinkpad) BIOS ≤ 2.01 affected
Lenovo S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS < 1.28 affected
Lenovo T14 Gen 3 (Type 21AH, 21AJ) Laptop (ThinkPad) BIOS < 1.47/1.27 affected
Lenovo T14 Gen 5 (Type 21MC, 21MD) Laptops (ThinkPad) BIOS < 1.18 affected
Lenovo T14s (Type 20T0, 20T1) Laptop (ThinkPad) BIOS < 1.38 affected
Lenovo T14s Gen 3 (Type 21BR 21BS) Laptop (ThinkPad) BIOS < 1.49 affected
Lenovo T14s Gen 3 (Type 21CQ 21CR) Laptop (ThinkPad) BIOS < 1.51 affected
Lenovo T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS < 1.23 affected
Lenovo T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS < 1.28 affected
Lenovo T14s Gen 5 (Type 21LS, 21LT) Laptop (ThinkPad) BIOS < 1.15 affected
Lenovo T14s Gen 6 (Type 21M1, 21M2) Laptops (ThinkPad) BIOS < 1.62/1.12 affected
Lenovo T14s Gen 6 (Type 21QX, 21QY) Laptops (ThinkPad) BIOS < 1.10 affected
Lenovo T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS < 1.09 affected
Lenovo T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS < 1.11 affected
Lenovo T15 (type 20S6, 20S7) Laptop (ThinkPad) BIOS ≤ 1.34 affected
Lenovo T15 Gen 2 (Type 20W4, 20W5) Laptop (ThinkPad) BIOS < 1.69/1.21 affected
Lenovo T15g Gen 1 (type 20UR 20US) Laptop (ThinkPad) BIOS ≤ 1.98 affected
Lenovo T15p Gen 2 (Type 21A7, 21A8) Laptop (ThinkPad) BIOS ≤ 1.84 affected
Lenovo T15p Gen 3 (Type 21DA 21DB) Laptop (ThinkPad) BIOS ≤ 1.68 affected
Lenovo T16 Gen 3 (Type 21MN, 21MQ) Laptops (ThinkPad) BIOS < 1.16 affected
Lenovo T16 Gen 4 (Type 21QE, 21QF) Laptops (ThinkPad) BIOS < 1.12 affected
Lenovo T16 Gen 4 (Type 22AW, 22AX) Laptops (ThinkPad) BIOS < 1.08 affected
Lenovo T490 (Type 20N2, 20N3) Laptop (ThinkPad) BIOS < 1.85/1.26 affected
Lenovo ThinkPad S2 Gen 7 Type 21BD BIOS ≤ 1.36 affected
Lenovo ThinkPad S2 Yoga Gen 6 Type 21AG China Only BIOS ≤ 1.38 affected
Lenovo ThinkPad S2 Yoga Gen 6 Type 20VN China Only BIOS < 1.38/1.36 affected
Lenovo X1 2-in-1 Gen 10 (Type 21NU, 21NV) Laptop (ThinkPad) BIOS < 1.39 affected
Lenovo X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS < 1.46 affected
Lenovo X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS < 1.15 affected
Lenovo X1 Extreme 2nd Gen (Type 20QV, 20QW) Laptop (ThinkPad) BIOS < 1.56 / 1.26 affected
Lenovo X1 Extreme 3rd Gen (Type 20TK, 20TL) Laptop (ThinkPad) BIOS < 1.38 / 1.22 affected
Lenovo X1 Extreme 4th Gen (Type 20Y5, 20Y6) Laptop (ThinkPad) BIOS < 1.34 / 1.19 affected
Lenovo X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS < 1.26 affected
Lenovo X1 Fold Gen 1 (Type 20RK, 20RL) Laptop (ThinkPad) BIOS ≤ 1.35 affected
Lenovo X1 Nano Gen 1 (Type 20UN 20UQ) Laptop (ThinkPad) BIOS < 1.69 affected
Lenovo X1 Nano Gen 2 (Type 21E8 21E9) Laptop (ThinkPad) BIOS < 1.33 / 1.21 affected
Lenovo X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS < 1.29 / 1.11 affected
Lenovo X1 Titanium (Type 20QA, 20QB) Laptop (ThinkPad) BIOS < 1.38 affected
Lenovo X1 Yoga 4th Gen (Type 20SA, 20SB) Laptop (ThinkPad) BIOS < 1.67 / 1.56 affected
Lenovo X1 Yoga 5th Gen (Type 20UB, 20UC) Laptop (ThinkPad) BIOS < 1.41 affected
Lenovo X1 Yoga 6th Gen (Type 20XY, 20Y0) Laptop (ThinkPad) BIOS < 1.76 affected
Lenovo X1 Yoga 7th Gen (Type 21CD, 21CE) Laptop (ThinkPad) BIOS < 1.53 affected
Lenovo X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS < 1.38 affected
Lenovo X12 Detachable Gen 1 (Type 20UW, 20UV) Laptop (ThinkPad) BIOS ≤ 1.40 affected
Lenovo X12 Detachable Gen 2 (Type 21LK, 21LL) Laptops (ThinkPad) BIOS < 1.22 / 1.15 affected
Lenovo X13 Gen 2 (Type 20WK, 20WL) Laptop (ThinkPad) BIOS < 1.65 affected
Lenovo X13 Gen 2 (Type 20XH, 20XJ) Laptop (ThinkPad) BIOS < 1.36 affected
Lenovo X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS < 1.37 affected
Lenovo X13 Gen 5 (Type 21LU, 21LV) Laptop (ThinkPad) BIOS < 1.17 affected
Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS < 1.11 affected
Lenovo X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS < 1.09 affected
Lenovo X13 Yoga Gen 1 (Type 20SX, 20SY) Laptop (ThinkPad) BIOS < 1.58 / 1.18 affected
Lenovo X13 Yoga Gen 2 (Type 20W8, 20W9) Laptop (ThinkPad) BIOS < 1.52/ 1.28 affected
Lenovo X13 Yoga Gen 3 (Type 21AW 21AX) Laptop (ThinkPad) BIOS < 1.25 affected
Lenovo X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS < 1.22 affected
Lenovo X390 (Type 20SC, 20SD) Laptop (ThinkPad) BIOS ≤ 1.87 affected
Lenovo X390 Yoga (Type 20NN, 20NQ) Laptop (ThinkPad) BIOS < 2.06 / 1.23 affected
Lenovo X9-14 Gen 1 (Type 21QA, 21QB) Laptop (ThinkPad) BIOS < 1.21 affected
Lenovo Z16 Gen 1 (Type 21D4, 21D5) Laptop (ThinkPad) BIOS < 1.76 affected
Lenovo Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS < 1.37 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-10237

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
使用已被攻破或存在风险的密码学算法
Source: CVE Program / CVE List V5
Vulnerability Title
Lenovo ThinkPad 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Lenovo ThinkPad是中国联想（Lenovo）公司的一个便携式计算机。 Lenovo ThinkPad存在加密问题漏洞，该漏洞源于嵌入式控制器固件问题，可能导致具有特权的本地用户对特权内存区域执行任意读写。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS 0 ~ 1.11 -
Lenovo X1 Carbon 13th Gen (Type 21NX, 21NY) Laptops (ThinkPad) BIOS 0 ~ 1.15 -
Lenovo P16v Gen 3 (Type 21RS, 21RT) Laptop (ThinkPad) BIOS 0 ~ 1.16 -
Lenovo L16 Gen 1 (Type 21L7 21L8) Laptops (ThinkPad) BIOS 0 ~ 1.40 -
Lenovo T14s Gen 6 (Type 21TB, 21TC) Laptops (ThinkPad) BIOS 0 ~ 1.11 -
Lenovo P14s Gen 6 (Type 21QT, 21QU) Laptops (ThinkPad) BIOS 0 ~ UEFI BIOS V1.22/ECP V1.13 -
Lenovo L13 Gen 6 (Type 21RB, 21RC) Laptops (ThinkPad) BIOS 0 ~ 1.15 -
Lenovo L14 Gen 6 (Type 21SE, 21SF) Laptops (ThinkPad) BIOS 0 ~ 1.14 -
Lenovo L16 Gen 2 (Type 21SC, 21SD) Laptops (ThinkPad) BIOS 0 ~ 1.13 -
Lenovo X13 Gen 6 (Type 21RM, 21RN) Laptops (ThinkPad) BIOS 0 ~ 1.09 -
Lenovo T14s Gen 6 (Type 21R1, 21R2) Laptops (ThinkPad) BIOS 0 ~ 1.09 -
Lenovo X1 2-in-1 Gen 9 (Type 21KE, 21KF) Laptop (ThinkPad) BIOS 0 ~ 1.46 -
Lenovo X1 Fold 16 Gen 1 (Type 21ES, 21ET) Laptop (ThinkPad) BIOS 0 ~ 1.26 -
Lenovo Z16 Gen 2 (Type 21JX, 21JY) Laptop (ThinkPad) BIOS 0 ~ 1.37 -
Lenovo P16v Gen 1 (Type 21FE, 21FF) Laptop (ThinkPad) BIOS 0 ~ 1.65/1.13 -
Lenovo X13 Gen 4 (Type 21J3, 21J4) Laptop (ThinkPad) BIOS 0 ~ 1.37 -
Lenovo T14s Gen 4 (Type 21F8, 21F9) Laptop (ThinkPad) BIOS 0 ~ 1.28 -
Lenovo P14s Gen 4 (Type 21K5, 21K6) Laptop (ThinkPad) BIOS 0 ~ 1.47 -
Lenovo P1 Gen 6 (Type 21FV, 21FW) Laptop (ThinkPad) BIOS 0 ~ 1.39 / 1.15 -
Lenovo P16v Gen 1 (Type 21FC, 21FD) Laptop (ThinkPad) BIOS 0 ~ BIOS: 1.66 / ECFW: 1.10 -
Lenovo P16 Gen 2 (Type 21FA, 21FB) Laptop (ThinkPad) BIOS 0 ~ BIOS: 1.99/ ECFW: 1.58 -
Lenovo X13 Yoga Gen 4 (Type 21F2, 21F3) Laptop (ThinkPad) BIOS 0 ~ 1.22 -
Lenovo P16s Gen 2 (Type 21HK, 21HL) Laptop (ThinkPad) BIOS 0 ~ 1.52 -
Lenovo T14s Gen 4 (Type 21F6, 21F7) Laptop (ThinkPad) BIOS 0 ~ 1.23 -
Lenovo L14 Gen 4 (Type 21H1, 21H2) Laptop (ThinkPad) BIOS 0 ~ 1.34 -
Lenovo L13 Gen 4 (Type 21FG, 21FH) Laptop (ThinkPad) BIOS 0 ~ 1.24 -
Lenovo X1 Nano Gen 3 (Type 21K1, 21K2) Laptop (ThinkPad) BIOS 0 ~ 1.29 / 1.11 -
Lenovo S2 Yoga Gen 8 (Types 21FU) China Only Laptop (ThinkPad) BIOS 0 ~ 1.28 -
Lenovo L15 Gen 4 (Type 21H7, 21H8) Laptops (ThinkPad) BIOS 0 ~ 1.27 -
Lenovo X1 Yoga 8th Gen (Type 21HQ, 21HR) Laptop (ThinkPad) BIOS 0 ~ 1.38 -

II. Public POCs for CVE-2025-10237

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-10237

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-10237 (1)

Same Patch Batch · Lenovo · 2026-06-10 · 6 CVEs total

CVE-2026-8637 7.8 HIGH Lenovo LanSchool Classic 代码问题漏洞
CVE-2026-9045 7.8 HIGH Lenovo Accessories and Display Manager for Enterprise 访问控制错误漏洞
CVE-2026-6090 7.0 HIGH Lenovo Smart Connect 安全漏洞
CVE-2025-10238 6.7 MEDIUM Lenovo ThinkPad 缓冲区错误漏洞
CVE-2026-7516 4.3 MEDIUM Lenovo Android Application 安全漏洞

IV. Related Vulnerabilities

Same product: X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS
Same vendor: Lenovo
Same weakness: CWE-327

V. Comments for CVE-2025-10237

No comments yet

Leave a comment