← Database

CVE-2022-3743

MEDIUM CVSS: 4.4 Published: 2023-08-23 Modified: 2026-06-17

Description

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enumerate Embedded Controller (EC) commands.

Affected Platforms

Lenovo Legion 5 15Iah7Lenovo Yoga 7-15Itl5Lenovo V14-IglLenovo Thinkbook 15P G2 IthLenovo Ideapad 1 14Iau7 FirmwareLenovo Yoga Slim 7 Prox 14Iah7 FirmwareLenovo Ideapad 5-15Iil05 FirmwareLenovo Legion 5-15Imh05H FirmwareLenovo Yoga Slim 7 Pro-14Itl5Lenovo Legion 5-15Imh05H

Weakness Type

CWE-200

References