Design/Logic Flaw

2022-04-2221:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

A potential vulnerability by a driver used during manufacturing process on some consumer Lenovo Notebook devices’ BIOS that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

CPENameOperatorVersion
ideapad_3-14ada05_firmwareeq< e8cn33ww
ideapad_3-14ada6_firmwareeq< hbcn21ww
ideapad_3-14alc6_firmwareeq< glcn43ww
ideapad_3-14are05_firmwareeq< dzcn42ww
ideapad_3-14igl05_firmwareeq< emcn52ww
ideapad_3-14iil05_firmwareeq< dvcn23ww
ideapad_3-14iml05_firmwareeq< dxcn41ww
ideapad_3-14itl05_firmwareeq< gccn26ww
ideapad_3-14itl6_firmwareeq< ggcn33ww
ideapad_3-15ada05_firmwareeq< e8cn33ww

Name	Operator	Version
ideapad_3-14ada05_firmware	eq	< e8cn33ww
ideapad_3-14ada6_firmware	eq	< hbcn21ww
ideapad_3-14alc6_firmware	eq	< glcn43ww
ideapad_3-14are05_firmware	eq	< dzcn42ww
ideapad_3-14igl05_firmware	eq	< emcn52ww
ideapad_3-14iil05_firmware	eq	< dvcn23ww
ideapad_3-14iml05_firmware	eq	< dxcn41ww
ideapad_3-14itl05_firmware	eq	< gccn26ww
ideapad_3-14itl6_firmware	eq	< ggcn33ww
ideapad_3-15ada05_firmware	eq	< e8cn33ww