CoreCVE
Back

MEDIUM

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormally due to an exposed Embedded Controller (EC) interface

Published Aug 23, 2023

Description

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormally due to an exposed Embedded Controller (EC) interface.

Affected products

Remediation

Vendor solution

Update system firmware to the version (or newer) indicated for your model in the Product Impact section in LEN-103710.

Weaknesses (1)

CWE-284

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner lenovo
Published Aug 23, 2023
Updated Aug 3, 2024
Reserved Oct 28, 2022
Link CVE-2022-3746

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-3746

Red Hat

No data

ENISA EUVD

Assigner lenovo
Published Aug 23, 2023
Updated Aug 3, 2024
Link EUVD-2022-43102

GitHub

No data