New Lenovo UEFI Firmware Vulnerabilities Affect Millions of Laptops

Wed, 04 May 2022 19:34:00 Daniel Sundermann

Three high-impact Unified Extensible Firmware Interface (UEFI) security vulnerabilities have been discovered impacting various Lenovo consumer laptop models, enabling malicious actors to deploy and execute firmware implants on the affected devices. Tracked as CVE-2021-3970, CVE-2021-3971, and CVE-2021-3972, the latter two "affect firmware drivers originally meant to be used only during the ...

More at https://thehackernews.com/2022/04/new-lenovo-uefi-firmware.html

About the author


Daniel Sundermann

Daniel Sundermann

 

I'm a long-time user and enthusiast of open source software and espouse the philosophy that software code should be open (readable). So that everyone can see what happens behind the scenes while we use our electronic devices every day.