CVE-2022-3743

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges under certain conditions the ability to enumerate Embedded Controller (EC) commands.

Score
CVSS 3.1 4.4 Medium
Status
Modified - psirt@lenovo.com
Published
2023-08-23
Last modified
2024-10-01
Weaknesses
CWE-200

Affected products

References