Design/Logic Flaw

2023-10-0919:15:00

PRIOn knowledge base

www.prio-n.com

manufacturing driver

security vulnerability

secure boot

nvram variable

lenovo notebook

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A potential vulnerability in a driver used during manufacturing process on some consumer Lenovo Notebook devices that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

CPENameOperatorVersion
d330-10igl_firmwareeq< g0cn11ww
ideapad_5_pro-16ach6_firmwareeq< gscn34ww
ideapad_5_pro-16ihu6_firmwareeq< grcn22ww
ideapad_5_pro_16arh7_firmwareeq< j4cn33ww
ideapad_creator_5-16ach6_firmwareeq< gscn34ww
ideapad_duet_3_10igl5_firmwareeq< eqcn37ww
ideapad_slim_7_pro_16ach6_firmwareeq< hucn16ww
s540-15iml_firmwareeq< cncn22ww
slim_7_16arh7_firmwareeq< klcn15ww
thinkbook_13x_itg_firmwareeq< hlcn30ww

Name	Operator	Version
d330-10igl_firmware	eq	< g0cn11ww
ideapad_5_pro-16ach6_firmware	eq	< gscn34ww
ideapad_5_pro-16ihu6_firmware	eq	< grcn22ww
ideapad_5_pro_16arh7_firmware	eq	< j4cn33ww
ideapad_creator_5-16ach6_firmware	eq	< gscn34ww
ideapad_duet_3_10igl5_firmware	eq	< eqcn37ww
ideapad_slim_7_pro_16ach6_firmware	eq	< hucn16ww
s540-15iml_firmware	eq	< cncn22ww
slim_7_16arh7_firmware	eq	< klcn15ww
thinkbook_13x_itg_firmware	eq	< hlcn30ww