CVE-2024-7756

Published: Sep 13, 2024Modified: Jun 17, 2026Deferred

6.8

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.9 / Impact: 5.9

Source: psirt@lenovo.com (Secondary)

Description

A potential vulnerability was reported in the ThinkPad L390 Yoga and 10w Notebook that could allow a local attacker to escalate privileges by accessing an embedded UEFI shell.

Related CWEs

CWE-489

Active Debug Code

The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (1)

https://support.lenovo.com/us/en/product_security/LEN-165524

Source: psirt@lenovo.com

Timeline

No history available yet.