Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2024-7756

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
lenovo

Description

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Lenovo 10w (Type 82ST, 82SU) Laptop (Lenovo) BIOS

Default version status: unaffected

  • 0 to < JSCN28WWaffected

Lenovo L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS

Default version status: unaffected

  • 0 to < 1.47affected

Lenovo L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad) BIOS

Default version status: unaffected

  • 0 to < 1.47affected

References