Lenovo ThinkPad EC Firmware Local Privilege Escalation: Memory Read/Write
CVE-2025-10237 Published on June 10, 2026
During an internal security assessment, a potential vulnerability was discovered in some ThinkPad embedded controller firmware that could allow a privileged local user to perform arbitrary reads or writes to privileged memory regions.
Vulnerability Analysis
CVE-2025-10237 can be exploited with local system access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to be very high.
Attack Vector:
LOCAL
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
HIGH
Weakness Type
Use of a Broken or Risky Cryptographic Algorithm
The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information. The use of a non-standard algorithm is dangerous because a determined attacker may be able to break the algorithm and compromise whatever data has been protected. Well-known techniques may exist to break the algorithm.
Products Associated with CVE-2025-10237
Want to know whenever a new CVE is published for Lenovo products? stack.watch will email you.
Affected Versions
Lenovo X13 Gen 6 (Type 21RK, 21RL) Laptops (ThinkPad) BIOS:- Before 1.11 is affected.
- Before 1.15 is affected.
- Before and including 1.16 is affected.
- Before 1.40 is affected.
- Before 1.11 is affected.
- Before UEFI BIOS V1.22/ECP V1.13 is affected.
- Before 1.15 is affected.
- Before 1.14 is affected.
- Before 1.13 is affected.
- Before 1.09 is affected.
- Before 1.09 is affected.
- Before 1.46 is affected.
- Before 1.26 is affected.
- Before 1.37 is affected.
- Before 1.65/1.13 is affected.
- Before 1.37 is affected.
- Before 1.28 is affected.
- Before 1.47 is affected.
- Before 1.39 / 1.15 is affected.
- Before BIOS: 1.66 / ECFW: 1.10 is affected.
- Before BIOS: 1.99/ ECFW: 1.58 is affected.
- Before 1.22 is affected.
- Before 1.52 is affected.
- Before 1.23 is affected.
- Before 1.34 is affected.
- Before 1.24 is affected.
- Before 1.29 / 1.11 is affected.
- Before 1.28 is affected.
- Before 1.27 is affected.
- Before 1.38 is affected.
- Before 1.62/1.12 is affected.
- Before and including 1.28 is affected.
- Before and including 1.70 is affected.
- Before 1.39 is affected.
- Before 1.21 is affected.
- Before 1.15 is affected.
- Before 1.27 is affected.
- Before 1.47/1.27 is affected.
- Before and including 1.68 is affected.
- Before 1.30 / 1.15 is affected.
- Before 1.51 is affected.
- Before 1.76 is affected.
- Before 1.49 is affected.
- Before 1.44 is affected.
- Before 1.25 is affected.
- Before 1.31 is affected.
- Before 1.33 / 1.21 is affected.
- Before and including 1.36 is affected.
- Before 1.53 is affected.
- Before 1.36 is affected.
- Before 1.38/1.36 is affected.
- Before 1.76 is affected.
- Before 1.52/ 1.28 is affected.
- Before 1.65 is affected.
- Before 1.36 is affected.
- Before and including 1.98 is affected.
- Before 1.36 is affected.
- Before and including 1.84 is affected.
- Before 1.33 is affected.
- Before and including 1.38 is affected.
- Before 1.34 / 1.19 is affected.
- Before and including 1.98 is affected.
- Before 1.38 is affected.
- Before 1.69 is affected.
- Before and including 1.40 is affected.
- Before 1.17 is affected.
- Before 1.73 is affected.
- Before 1.12 is affected.
- Before 1.08 is affected.
- Before 1.69/1.21 is affected.
- Before and including 1.35 is affected.
- Before 1.38 / 1.22 is affected.
- Before 1.38 is affected.
- Before and including 1.34 is affected.
- Before 1.58 / 1.18 is affected.
- Before 1.41 is affected.
- Before 2.06 / 1.23 is affected.
- Before 1.67 / 1.56 is affected.
- Before and including 1.87 is affected.
- Before and including 2.01 is affected.
- Before 1.85/1.26 is affected.
- Before 1.56 / 1.26 is affected.
- Before 1.53 is affected.
- Before 1.45 is affected.
- Before 1.21 is affected.
- Before 1.17 is affected.
- Before 1.10 is affected.
- Before 1.06 is affected.
- Before 1.10 is affected.
- Before 1.18 / 1.14 is affected.
- Before 1.26 is affected.
- Before 1.18 is affected.
- Before 1.22 / 1.15 is affected.
- Before 1.16 is affected.
- Before and including 1.20 is affected.
Exploit Probability
EPSS
0.08%
Percentile
0.16%
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.