6.8
Medium
CVE-2024-7756 A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to…
Description
A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| 10w (Type 82ST, 82SU) Laptop (Lenovo) BIOS | Versions not published | |
| L390 (type 20NR, 20NS) Laptops (ThinkPad) BIOS 1.47 | earliest → < 1.47 | 1.47 |
| L390 Yoga (type 20NT, 20NU) Laptops (ThinkPad) BIOS 1.47 | earliest → < 1.47 | 1.47 |
| thinkpad_l390_yoga_firmware 1.47 | earliest → < 1.47 | 1.47 |
| 10w_firmware | Versions not published |