ESET found Lenovo Windows 11 and 10 laptops have Secure Boot vulnerability, BIOS update out

guest · Nov 9, 2022

By Sayan Sen - November 9, 2022

Earlier this year in April, a security researcher at ESET Martin Smolár, found that several Lenovo notebook models had a vulnerable UEFI. Similar to that, another new set of three vulnerabilities have been discovered again by Smolár in a bunch of Lenovo Windows 11 and Windows 10 notebooks. This time the vulnerabilities, which exist in the Driver Execution Environment (DXE) driver, allow threat actors to disable Secure Boot by modifying NVRAM variables.

Lenovo has published a security advisory about the vulnerabilities explaining how they work: [...]
Click to expand...

You can find the full list of affected models as well as the firmware which patch the vulnerabilities on Lenovo's official website here.

Source: ESET research (Twitter)
Click to expand...

Lenovo Notebook BIOS Vulnerabilities

Lenovo Security Advisory: LEN-94952
Potential Impact: Disable Secure Boot
Severity: High
Scope of Impact: Lenovo-specific
CVE Identifier: CVE-2022-3430, CVE-2022-3431, CVE-2022-3432
Click to expand...

Log in or Sign up

ESET found Lenovo Windows 11 and 10 laptops have Secure Boot vulnerability, BIOS update out

guest Guest

Log in or Sign up

ESET found Lenovo Windows 11 and 10 laptops have Secure Boot vulnerability, BIOS update out

guest Guest

Useful Searches