Description (CNA)
Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Lenovo Group Ltd. / Lenovo Notebook BIOS | affected Various |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.