Design/Logic Flaw

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enumerate Embedded Controller EC commands...

CVE-2022-3743

The CVE-2022-3743 entry concerns Lenovo consumer notebooks with LCFC BIOS. A local attacker with elevated privileges could enumerate Embedded Controller (EC) commands under certain conditions, enabling information disclosure (confidentiality impact). Affected component: LCFC BIOS on Lenovo consum...