Lenovo updates security on 100 laptops

Stefan Mileschin · 21st April 2022, 05:31

Bug effecting a million laptops

Lenovo has released security updates for more than 100 laptop models to fix critical vulnerabilities that make it possible for advanced hackers to surreptitiously install malicious firmware that can be next to impossible to remove or, in some cases, to detect.

Three vulnerabilities affecting more than a million laptops can give hackers the ability to modify a computer's UEFI which is the first piece of software to run.

The UEFI resides in a flash chip on the motherboard, infections are difficult to detect and even harder to remove.

Two of the vulnerabilities -- tracked as CVE-2021-3971 and CVE-2021-3972 -- reside in UEFI firmware drivers intended for use only during the manufacturing process of Lenovo consumer notebooks. Lenovo engineers inadvertently included the drivers in the production BIOS images without being properly deactivated.

https://fudzilla.com/news/54723-leno...on-100-laptops

21st April 2022, 05:31	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,575	Lenovo updates security on 100 laptops Bug effecting a million laptops Lenovo has released security updates for more than 100 laptop models to fix critical vulnerabilities that make it possible for advanced hackers to surreptitiously install malicious firmware that can be next to impossible to remove or, in some cases, to detect. Three vulnerabilities affecting more than a million laptops can give hackers the ability to modify a computer's UEFI which is the first piece of software to run. The UEFI resides in a flash chip on the motherboard, infections are difficult to detect and even harder to remove. Two of the vulnerabilities -- tracked as CVE-2021-3971 and CVE-2021-3972 -- reside in UEFI firmware drivers intended for use only during the manufacturing process of Lenovo consumer notebooks. Lenovo engineers inadvertently included the drivers in the production BIOS images without being properly deactivated. https://fudzilla.com/news/54723-leno...on-100-laptops

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Lenovo is going to release two Ryzen laptops	Stefan Mileschin	WebNews	0	10th September 2021 09:14
Lenovo updates Legion gaming laptops with 11th-gen Intel H-series chips	Stefan Mileschin	WebNews	0	13th May 2021 08:22
MSI updates its gaming laptops with new Intel and NVIDIA chips	Stefan Mileschin	WebNews	0	14th January 2021 08:13
Acer updates its gaming laptops with new Intel chips	Stefan Mileschin	WebNews	0	24th June 2020 10:32
Dell Updates Alienware m15 & m17 Gaming Laptops	Stefan Mileschin	WebNews	0	28th May 2019 15:38
Lenovo Readies New ThinkBook Family of Laptops	Stefan Mileschin	WebNews	0	5th May 2019 05:09
Dell updates Inspiron and XPS 13 laptops	Stefan Mileschin	WebNews	0	2nd September 2017 17:06
Lenovo's new pro laptops include one built for VR	Stefan Mileschin	WebNews	0	8th February 2017 12:06
Lenovo Flex 3 vs Lenovo IdeaPad – 2 Laptops for $480	Stefan Mileschin	WebNews	0	5th December 2016 07:32
Gateway unveils slimmer NE laptops, updates DX, SX and One ZX desktops	Stefan Mileschin	WebNews	0	23rd July 2013 07:49