Lenovo Windows 11 and 10 laptops have Secure Boot vulnerability, BIOS update out

[Gandalf_The_Grey]

Content source

https://www.neowin.net/news/eset-found-lenovo-windows-11-and-10-laptops-have-secure-boot-vulnerability-bios-update-out/

Earlier this year in April, a security researcher at ESET Martin Smolár, found that several Lenovo notebook models had a vulnerable UEFI. Similar to that, another new set of three vulnerabilities have been discovered again by Smolár in a bunch of Lenovo Windows 11 and Windows 10 notebooks. This time the vulnerabilities, which exist in the Driver Execution Environment (DXE) driver, allow threat actors to disable Secure Boot by modifying NVRAM variables.

You can find the full list of affected models as well as the firmware which patch the vulnerabilities on Lenovo's official website here.

ESET found Lenovo Windows 11 and 10 laptops have Secure Boot vulnerability, BIOS update out

ESET has discovered another set of security vulnerabilities on Windows 11 and 10 Lenovo laptops. These allow attackers to disable Secure Boot. A list of vulnerable device models has been published.

www.neowin.net

Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US

support.lenovo.com

 

[Stopspying]

ESET found Lenovo Windows 11 and 10 laptops have Secure Boot vulnerability, BIOS update out

ESET has discovered another set of security vulnerabilities on Windows 11 and 10 Lenovo laptops. These allow attackers to disable Secure Boot. A list of vulnerable device models has been published.

www.neowin.net

Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US

support.lenovo.com

"..Lenovo has issued ffirmware updates for two of the latest vulnerabilities - which have been given the names CVE-2022-3430 and CVE-2022-3431. However, the third vulnerability - CVE-2022-3432 - has been left unpatched as it only affects the Lenovo Ideapad Y700-14ISK.
Lenovo says that as that particular laptop is no longer supported by the company, it will not be receiving a fix. Owners of Lenovo laptops can check if their particular models are impacted by the vulnerabilities by consulting the list the company shares in its security advisory..."

Laptop flaws could help malware survive a hard disk wipe

PC manufacturer Lenovo has been forced to push out a security update to more than two dozen of its laptop models, following the discovery of high severity vulnerabilities that could be exploited by malicious hackers.

www.tripwire.com