A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.
Advisories
Source ID Title
EUVD EUVD EUVD-2022-43100 A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.
Fixes

Solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-103710.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: lenovo

Published:

Updated: 2024-08-03T01:20:57.610Z

Reserved: 2022-10-28T14:48:18.783Z

Link: CVE-2022-3744

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-08-23T20:15:08.577

Modified: 2024-11-21T07:20:09.543

Link: CVE-2022-3744

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.