Input validation

2022-04-2221:15:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A potential vulnerability in LenovoVariable SMI Handler due to insufficient validation in some Lenovo Notebook models BIOS may allow an attacker with local access and elevated privileges to execute arbitrary code.

CPENameOperatorVersion
ideapad_3-14ada05_firmwareeq< e8cn33ww
ideapad_3-14ada6_firmwareeq< hbcn21ww
ideapad_3-14alc6_firmwareeq< glcn43ww
ideapad_3-14are05_firmwareeq< dzcn42ww
ideapad_3-14igl05_firmwareeq< emcn52ww
ideapad_3-14iil05_firmwareeq< dvcn23ww
ideapad_3-14iml05_firmwareeq< dxcn41ww
ideapad_3-14itl05_firmwareeq< gccn26ww
ideapad_3-14itl6_firmwareeq< ggcn33ww
ideapad_3-15ada05_firmwareeq< e8cn33ww

Name	Operator	Version
ideapad_3-14ada05_firmware	eq	< e8cn33ww
ideapad_3-14ada6_firmware	eq	< hbcn21ww
ideapad_3-14alc6_firmware	eq	< glcn43ww
ideapad_3-14are05_firmware	eq	< dzcn42ww
ideapad_3-14igl05_firmware	eq	< emcn52ww
ideapad_3-14iil05_firmware	eq	< dvcn23ww
ideapad_3-14iml05_firmware	eq	< dxcn41ww
ideapad_3-14itl05_firmware	eq	< gccn26ww
ideapad_3-14itl6_firmware	eq	< ggcn33ww
ideapad_3-15ada05_firmware	eq	< e8cn33ww