Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-7756 EUVD-2024-48632GHSA-q7vm-868g-mvqm

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges …

Published Sep 13, 2024 · Updated Sep 16, 2024 · Assigned by lenovo

Vendor: Lenovo Product: 10w (Type 82ST, 82SU) Laptop (Lenovo) BIOS Product: L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS Product: L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad) BIOS

Description

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.

Affected products

VendorProductAffectedFixed
Lenovo 10w (Type 82ST, 82SU) Laptop (Lenovo) BIOS < JSCN28WW JSCN28WW
Lenovo L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS < 1.47 1.47
Lenovo L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad) BIOS < 1.47 1.47

References