CVE-2024-7756 — Lenovo / 10w (Type 82ST, 82SU) Laptop (Lenovo) BIOS

CVE-2024-7756

Lenovo / 10w (Type 82ST, 82SU) Laptop (Lenovo) BIOS PUBLISHED

Description (CNA)

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.

Affected (CNA)

Vendor / product	Versions
Lenovo / 10w (Type 82ST, 82SU) Laptop (Lenovo) BIOS	affected 0 before JSCN28WW
Lenovo / L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS	affected 0 before 1.47
Lenovo / L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad) BIOS	affected 0 before 1.47

CWE

CWE-489

References

https://support.lenovo.com/us/en/product_security/LEN-165524

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.