medium6.7
CVE-2022-3746
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to ca…
Impact
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormally due to an exposed Embedded Controller (EC) interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lenovo | Ideapad 1 14iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 1 14igl7 Firmware | before kkcn15ww |
| Lenovo | Ideapad 1 15iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 1 15igl7 Firmware | before kkcn15ww |
| Lenovo | Ideapad 1-14ijl7 Firmware | before htcn31ww |
| Lenovo | Ideapad 1-15ijl7 Firmware | before htcn31ww |
| Lenovo | Ideapad 3 14iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 3 15iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 3 17iau7 Firmware | before jkcn34ww |
| Lenovo | Ideapad 3-15igl05 Firmware | before dvcn28ww |
| Lenovo | Ideapad 3-17iil05 Firmware | before emcn56ww |
| Lenovo | Ideapad 3-17itl6 Firmware | before ggcn51ww |