Design/Logic Flaw

2023-01-2621:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

manufacturing process

potential

driver flaw

secure boot

nvram variable

elevated privileges

attacker

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

A potential vulnerability in a driver used during manufacturing process on the Ideapad Y700-14ISK that was mistakenly not deactivated may allow an attacker with elevated privileges to modify secure boot setting by modifying an NVRAM variable.

References

support.lenovo.com/us/en/product_security/LEN-94952