medium6.7
CVE-2022-3744
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to un…
Impact
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideapad 1 14iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 1 14igl7 Firmware | before kkcn15ww |
| Lenovo | Ideapad 1 15iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 1 15igl7 Firmware | before kkcn15ww |
| Lenovo | Ideapad 1-14ijl7 Firmware | before htcn31ww |
| Lenovo | Ideapad 1-15ijl7 Firmware | before htcn31ww |
| Lenovo | Ideapad 3 14iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 3 15iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 3 17iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 3-15igl05 Firmware | before dvcn28ww |
| Lenovo | Ideapad 3-17iil05 Firmware | before emcn56ww |
| Lenovo | Ideapad 3-17itl6 Firmware | before ggcn51ww |