Lenovo Windows 11 and 10 laptops have Secure Boot vulnerability, BIOS update out

Gandalf_The_Grey

Level 76
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Well-known
Apr 24, 2016
6,696
Earlier this year in April, a security researcher at ESET Martin Smolár, found that several Lenovo notebook models had a vulnerable UEFI. Similar to that, another new set of three vulnerabilities have been discovered again by Smolár in a bunch of Lenovo Windows 11 and Windows 10 notebooks. This time the vulnerabilities, which exist in the Driver Execution Environment (DXE) driver, allow threat actors to disable Secure Boot by modifying NVRAM variables.

You can find the full list of affected models as well as the firmware which patch the vulnerabilities on Lenovo's official website here.
 

Stopspying

Level 19
Verified
Top Poster
Well-known
Jan 21, 2018
814
"..Lenovo has issued ffirmware updates for two of the latest vulnerabilities - which have been given the names CVE-2022-3430 and CVE-2022-3431. However, the third vulnerability - CVE-2022-3432 - has been left unpatched as it only affects the Lenovo Ideapad Y700-14ISK.
Lenovo says that as that particular laptop is no longer supported by the company, it will not be receiving a fix.
Owners of Lenovo laptops can check if their particular models are impacted by the vulnerabilities by consulting the list the company shares in its security advisory..."

 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top