Skip to content
OpenAdvisories
High · 7.8 CVE-2024-12673 EUVD-2024-51047GHSA-3hxq-f9p6-ww56

An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devices which could allo…

Published Feb 12, 2025 · Updated Feb 12, 2025 · Assigned by lenovo

Description

An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devices which could allow a local attacker to elevate privileges on the system.

This vulnerability only affects Vantage installed on these devices:

* Lenovo V Series (Gen 5)
* ThinkBook 14 (Gen 6, 7)
* ThinkBook 16 (Gen 6, 7)
* ThinkPad E Series (Gen 1)

Affected products

VendorProductAffectedFixed
Lenovo Vantage < 10.2501.15.0 10.2501.15.0

References