Description
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lenovo Group | Lenovo Notebook BIOS | Various | — |