CVEvulnerability

CVE-2022-3746

6.7 MEDIUM Published 2023-08-23 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-08-23
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284

Description

A potential vulnerability was discovered in LCFC BIOS for some Lenovo consumer notebook models that could allow a local attacker with elevated privileges to cause some peripherals to work abnormally due to an exposed Embedded Controller (EC) interface.

Affected configurations

• lenovo ideapad 1 14iau7 firmware (< jkcn34ww) • lenovo ideapad 1 14igl7 firmware (< kkcn15ww) • lenovo ideapad 1 15iau7 firmware (< jkcn34ww) • lenovo ideapad 1 15igl7 firmware (< kkcn15ww) • lenovo ideapad 1-14ijl7 firmware (< htcn31ww) • lenovo ideapad 1-15ijl7 firmware (< htcn31ww) • lenovo ideapad 3 14iau7 firmware (< jkcn34ww) • lenovo ideapad 3 15iau7 firmware (< jkcn34ww) • lenovo ideapad 3 17iau7 firmware (< jkcn34ww) • lenovo ideapad 3-15igl05 firmware (< dvcn28ww) • lenovo ideapad 3-17iil05 firmware (< emcn56ww) • lenovo ideapad 3-17itl6 firmware (< ggcn51ww) • lenovo ideapad 5 15ial7 firmware (< jbcn27ww) • lenovo ideapad 5-15itl05 firmware (< fhcn70ww) • lenovo l3-15iml05 firmware (< ejcn30ww) • lenovo l3-15itl6 firmware (< gfcn29ww) • lenovo legion 5 15iah7 firmware (< j2cn49ww) • lenovo legion 5 15iah7h firmware (< j2cn49ww) • lenovo legion 5 pro 16iah7 firmware (< j2cn49ww) • lenovo legion 5 pro 16iah7h firmware (< j2cn49ww) • lenovo legion 5 pro-16ith6 firmware (< h1cn52ww) • lenovo legion 5 pro-16ith6h firmware (< h1cn52ww) • lenovo legion 5-15imh05 firmware (< efcn58ww) • lenovo legion 5-15imh05h firmware (< efcn58ww) • lenovo legion 5-15imh6 firmware (< g8cn22ww) • lenovo legion 5-15ith6 firmware (< h1cn52ww) • lenovo legion 5-15ith6h firmware (< h1cn52ww) • lenovo legion 5-17imh05 firmware (< efcn58ww) • lenovo legion 5-17imh05h firmware (< efcn58ww) • lenovo legion 5-17ith6 firmware (< h1cn52ww) • lenovo legion 5-17ith6h firmware (< h1cn52ww) • lenovo legion 5p-15imh05 firmware (< efcn58ww) • lenovo legion 5p-15imh05h firmware (< efcn58ww) • lenovo legion 7 16iax7 firmware (< k1cn40ww) • lenovo legion 7-16ithg6 firmware (< h1cn52ww) • lenovo s14 g2 itl firmware (< ggcn51ww) • lenovo s14 g3 iap firmware (< jkcn34ww) • lenovo slim 7 14iap7 firmware (< jhcn28ww) • lenovo slim 7 carbon 13iap7 firmware (< k2cn34ww) • lenovo slim 7 prox 14iah7 firmware (< hmcn41ww) • lenovo slim 9 14iap7 firmware (< j3cn49ww) • lenovo thinkbook 15p imh firmware (< f6cn26ww) • lenovo v14 g2 ijl firmware (< htcn31ww) • lenovo v14 g3 iap firmware (< jkcn34ww) • lenovo v15 g2 ijl firmware (< htcn31ww) • lenovo v15 g3 iap firmware (< jkcn34ww) • lenovo v17 g3 iap firmware (< jkcn34ww) • lenovo s540-13itl firmware (< fzcn26ww) • lenovo slim 7 pro-14ihu5 firmware (< fjcn74ww) • lenovo slim 9-14itl05 firmware (< escn56ww) • lenovo thinkbook 15p g2 ith firmware (< hjcn32ww) • lenovo v14 g1-iml firmware (< dxcn44ww) • lenovo v14 g2-itl firmware (< ggcn51ww) • lenovo v14-igl firmware (< dvcn28ww) • lenovo v15 g1-iml firmware (< dxcn44ww) • lenovo v15 g2-itl firmware (< ggcn51ww) • lenovo v15-igl firmware (< dvcn28ww) • lenovo v17 g2-itl firmware (< ggcn51ww) • lenovo v17-iil firmware (< emcn56ww) • lenovo yoga 7 14ial7 firmware (< j1cn35ww) … and 27 more

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References