Hardcoded credentials

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential...

Design/Logic Flaw

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enumerate Embedded Controller EC commands...

CVE-2022-3746

Summary of vulnerability (CVE-2022-3746) : The issue affects Lenovo consumer notebook models using LCFC BIOS, where an exposed Embedded Controller (EC) interface can be leveraged by a local attacker with elevated privileges to cause certain peripherals to behave abnormally. The available sources ...

CVE-2022-3746

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormally due to an exposed Embedded Controller EC interface...

CVE-2022-3745

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to view incoming and returned data from SMI...

CVE-2022-3745

CVE-2022-3745 affects LCFC BIOS on Lenovo consumer notebooks; a local attacker with elevated privileges could view data from SMI. Documents provide the affected software (LCFC BIOS) and impact (information disclosure) but do not specify root cause details or a fix. Remediation not described in th...

CVE-2022-3745

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to view incoming and returned data from SMI...

CVE-2022-3744

The CVE-2022-3744 issue concerns LCFC BIOS on certain Lenovo consumer notebooks. A hard-coded SMI handler credential could allow a local attacker with elevated privileges to unlock UEFI variables, due to the root cause in the BIOS code. The practical impact is high confidentiality, integrity, and...

CVE-2022-3744

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential...

CVE-2022-3743

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enumerate Embedded Controller EC commands...

CVE-2022-3743

The CVE-2022-3743 entry concerns Lenovo consumer notebooks with LCFC BIOS. A local attacker with elevated privileges could enumerate Embedded Controller (EC) commands under certain conditions, enabling information disclosure (confidentiality impact). Affected component: LCFC BIOS on Lenovo consum...

CVE-2022-3743

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enumerate Embedded Controller EC commands...

CVE-2022-3742

CVE-2022-3742 concerns Lenovo notebook models with LCFC BIOS. The affected component is the LCFC BIOS firmware, where improper buffer validation could allow a local attacker with elevated privileges to execute arbitrary code. The NVD/CVEs indicate an impact on confidentiality, integrity, and avai...

CVE-2022-3742

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation...

CVE-2022-3742

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to execute arbitrary code due to improper buffer validation...

PT-2023-13539 · Lenovo · Lcfc Bios

Name of the Vulnerable Software and Affected Versions: LCFC BIOS affected versions not specified Description: A potential issue was discovered in LCFC BIOS for some Lenovo consumer notebook models. This could allow a local attacker with elevated privileges to unlock UEFI variables due to a...

Lenovo Notebook 信任管理问题漏洞

Lenovo Notebook is a laptop from Lenovo, a Chinese company. The Lenovo notebook suffers from a trust management issue vulnerability that stems from a hardcoded SMI handler credential in the LCFC BIOS that allows a local attacker with elevated privileges to unlock UEFI variables...

Lenovo Notebook 信息泄露漏洞

Lenovo Notebook is a laptop from Lenovo, a Chinese company. The Lenovo notebook suffers from an information disclosure vulnerability that stems from a security issue discovered in the LCFC BIOS that allows a local attacker with elevated privileges to view incoming and outgoing data from the SMI...

PT-2023-13541 · Lenovo · Lcfc Bios

Name of the Vulnerable Software and Affected Versions: LCFC BIOS affected versions not specified Description: A potential issue was discovered in LCFC BIOS for some Lenovo consumer notebook models. This could allow a local attacker with elevated privileges to cause some peripherals to work...

Lenovo Notebook 访问控制错误漏洞

Lenovo Notebook is a laptop computer from Lenovo, a Chinese company. The Lenovo notebook suffers from an Access Control Error vulnerability that stems from the exposure of the Embedded Controller EC interface in the LCFC BIOS, which causes certain peripheral devices to work abnormally...