Lenovo wasn't informed so no patch yet. Fysical access is required so sky is not falling. Link removed. Keep in mind, malware links are not welcome here. Ron
Sorry guys. Didn't mean any harm. I thought, anyone who can read the code, knows how&where to find it anyway. But I understand.
Same vulnerable UEFI code also found on hardware from other big names; f.i. on an HP laptop and several Gigabyte motherboards. https://mobile.twitter.com/al3xtjames/status/750183816266940417?p=v