Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-3744 EUVD-2022-43100GHSA-fq4g-xqp9-9643

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with eleva…

Published Aug 23, 2023 · Updated Aug 3, 2024 · Assigned by lenovo

Description

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.

Affected products

VendorProductAffectedFixed
Lenovo Notebook various —

References