Design/Logic Flaw

2022-04-2221:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A potential vulnerability by a driver used during older manufacturing processes on some consumer Lenovo Notebook devices that was mistakenly included in the BIOS image could allow an attacker with elevated privileges to modify firmware protection region by modifying an NVRAM variable.

CPENameOperatorVersion
ideapad_3-14ada05_firmwareeq< e8cn33ww
ideapad_3-14ada6_firmwareeq< hbcn21ww
ideapad_3-14alc6_firmwareeq< glcn43ww
ideapad_3-14are05_firmwareeq< dzcn42ww
ideapad_3-14igl05_firmwareeq< emcn52ww
ideapad_3-14iil05_firmwareeq< dvcn23ww
ideapad_3-15ada05_firmwareeq< e8cn33ww
ideapad_3-15ada6_firmwareeq< hbcn21ww
ideapad_3-15alc6_firmwareeq< glcn43ww
ideapad_3-15are05_firmwareeq< dzcn42ww

Name	Operator	Version
ideapad_3-14ada05_firmware	eq	< e8cn33ww
ideapad_3-14ada6_firmware	eq	< hbcn21ww
ideapad_3-14alc6_firmware	eq	< glcn43ww
ideapad_3-14are05_firmware	eq	< dzcn42ww
ideapad_3-14igl05_firmware	eq	< emcn52ww
ideapad_3-14iil05_firmware	eq	< dvcn23ww
ideapad_3-15ada05_firmware	eq	< e8cn33ww
ideapad_3-15ada6_firmware	eq	< hbcn21ww
ideapad_3-15alc6_firmware	eq	< glcn43ww
ideapad_3-15are05_firmware	eq	< dzcn42ww