← Database
CVE-2022-3744
MEDIUM
CVSS: 6.7
Published: 2023-08-23
Modified: 2026-06-17
Description
A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to unlock UEFI variables due to a hard-coded SMI handler credential.
Affected Platforms
Lenovo Legion 5 15Iah7Lenovo Yoga 7-15Itl5Lenovo V14-IglLenovo Thinkbook 15P G2 IthLenovo Ideapad 1 14Iau7 FirmwareLenovo Yoga Slim 7 Prox 14Iah7 FirmwareLenovo Ideapad 5-15Iil05 FirmwareLenovo Legion 5-15Imh05H FirmwareLenovo Yoga Slim 7 Pro-14Itl5Lenovo Legion 5-15Imh05H