medium4.4
CVE-2022-3743
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under…
Impact
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enumerate Embedded Controller (EC) commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideapad 1 14iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 1 14igl7 Firmware | before kkcn15ww |
| Lenovo | Ideapad 1 15iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 1 15igl7 Firmware | before kkcn15ww |
| Lenovo | Ideapad 1-14ijl7 Firmware | before htcn31ww |
| Lenovo | Ideapad 1-15ijl7 Firmware | before htcn31ww |
| Lenovo | Ideapad 3 14iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 3 15iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 3 17iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 3-15igl05 Firmware | before dvcn28ww |
| Lenovo | Ideapad 3-17iil05 Firmware | before emcn56ww |
| Lenovo | Ideapad 3-17itl6 Firmware | before ggcn51ww |