CVE-2022-3744

published 2023-08-23

CVE-2022-3744: A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.

Affected

88 ranges · showing 25

Vendor	Product	Version range	Fixed in
lenovo	ideapad_1-14ijl7_firmware	< htcn31ww	htcn31ww
lenovo	ideapad_1-15ijl7_firmware	< htcn31ww	htcn31ww
lenovo	ideapad_1_14iau7_firmware	< jkcn34ww	jkcn34ww
lenovo	ideapad_1_14igl7_firmware	< kkcn15ww	kkcn15ww
lenovo	ideapad_1_15iau7_firmware	< jkcn34ww	jkcn34ww
lenovo	ideapad_1_15igl7_firmware	< kkcn15ww	kkcn15ww
lenovo	ideapad_3-14igl05_firmware	< dvcn28ww	dvcn28ww
lenovo	ideapad_3-14iil05_firmware	< emcn56ww	emcn56ww
lenovo	ideapad_3-14iml05_firmware	< dxcn44ww	dxcn44ww
lenovo	ideapad_3-14itl05_firmware	< gccn32ww	gccn32ww
lenovo	ideapad_3-14itl6_firmware	< ggcn51ww	ggcn51ww
lenovo	ideapad_3-15igl05_firmware	< dvcn28ww	dvcn28ww
lenovo	ideapad_3-15iil05_firmware	< emcn56ww	emcn56ww
lenovo	ideapad_3-15iml05_firmware	< dxcn44ww	dxcn44ww
lenovo	ideapad_3-15itl05_firmware	< gccn32ww	gccn32ww
lenovo	ideapad_3-15itl6_firmware	< ggcn51ww	ggcn51ww
lenovo	ideapad_3-17iil05_firmware	< emcn56ww	emcn56ww
lenovo	ideapad_3-17iml05_firmware	< dxcn44ww	dxcn44ww
lenovo	ideapad_3-17itl6_firmware	< ggcn51ww	ggcn51ww
lenovo	ideapad_3_14iau7_firmware	< jkcn34ww	jkcn34ww
lenovo	ideapad_3_15iau7_firmware	< jkcn34ww	jkcn34ww
lenovo	ideapad_3_17iau7_firmware	< jkcn34ww	jkcn34ww
lenovo	ideapad_5-15iil05_firmware	< dpcn58ww	dpcn58ww
lenovo	ideapad_5-15itl05_firmware	< fhcn70ww	fhcn70ww
lenovo	ideapad_5_15ial7_firmware	< jbcn27ww	jbcn27ww

CWE-798