4 ms·

Lenovo issues emergency security patch for hundreds of models

31 points by DMell 4y ago

seltzered_ 4y ago
Article is based on https://www.bleepingcomputer.com/news/security/new-lenovo-bios-updates-fix-security-bugs-in-hundreds-of-models/ https://www.bleepingcomputer.com/news/security/new-lenovo-bi...
- detaro 4y ago
  which in turn is mostly regurgitating the original security advisory: https://support.lenovo.com/us/en/product_security/LEN-94953 https://support.lenovo.com/us/en/product_security/LEN-94953
version_five 4y ago
> may allow an attacker with local access and elevated privileges to execute arbitrary code What are "elevated privileges"? If I lose my laptop and it's locked, can someone execute arbitrary code with this?
- cmeacham98 4y ago
  No, the exploit is against the BIOS. It involves an attacker with escalated privileges in the OS using this exploit to further escalate to ACE in the BIOS. That said, if you lose your laptop and it is not encrypted you can safely assume the thief has full access, locked or not.
  - nyanpasu64 4y ago
    Does this allow executing code to flash unsigned customized BIOSes without disassembling the laptop to flash the BIOS chips through hardware (which works in the absence of Intel Boot Guard)?
    - cmeacham98 4y ago
      I'm not an expert (so take this with a grain of salt), but by my understanding that should be theoretically possible. However, I'm not aware of any successful attempts.
eimrine 4y ago
May I see the full list of vulnerable devices? I have several of those.
- AlbertoGP 4y ago
  Yes, it is in the link provied by detaro in another comment: https://news.ycombinator.com/item?id=32883388 https://news.ycombinator.com/item?id=32883388 Scroll down for the list: https://support.lenovo.com/us/en/product_security/LEN-94953 https://support.lenovo.com/us/en/product_security/LEN-94953
zinekeller 4y ago
Reading from Lenovo's advisory, it's not just Lenovo that is affected, but everyone who uses the reference UEFI implementation Tianocore is affected (and as far as I know AMI and Insyde also used parts of Tianocore but I can't say if they copied the affected part)

31 points by DMell 4y ago

Article is based on https://www.bleepingcomputer.com/news/security/new-lenovo-bios-updates-fix-security-bugs-in-hundreds-of-models/ https://www.bleepingcomputer.com/news/security/new-lenovo-bi...

detaro 4y ago
which in turn is mostly regurgitating the original security advisory: https://support.lenovo.com/us/en/product_security/LEN-94953 https://support.lenovo.com/us/en/product_security/LEN-94953

version_five 4y ago

> may allow an attacker with local access and elevated privileges to execute arbitrary code What are "elevated privileges"? If I lose my laptop and it's locked, can someone execute arbitrary code with this?

cmeacham98 4y ago
No, the exploit is against the BIOS. It involves an attacker with escalated privileges in the OS using this exploit to further escalate to ACE in the BIOS. That said, if you lose your laptop and it is not encrypted you can safely assume the thief has full access, locked or not.
- nyanpasu64 4y ago
  Does this allow executing code to flash unsigned customized BIOSes without disassembling the laptop to flash the BIOS chips through hardware (which works in the absence of Intel Boot Guard)?
  - cmeacham98 4y ago
    I'm not an expert (so take this with a grain of salt), but by my understanding that should be theoretically possible. However, I'm not aware of any successful attempts.

eimrine 4y ago

May I see the full list of vulnerable devices? I have several of those.

AlbertoGP 4y ago
Yes, it is in the link provied by detaro in another comment: https://news.ycombinator.com/item?id=32883388 https://news.ycombinator.com/item?id=32883388 Scroll down for the list: https://support.lenovo.com/us/en/product_security/LEN-94953 https://support.lenovo.com/us/en/product_security/LEN-94953

zinekeller 4y ago

Reading from Lenovo's advisory, it's not just Lenovo that is affected, but everyone who uses the reference UEFI implementation Tianocore is affected (and as far as I know AMI and Insyde also used parts of Tianocore but I can't say if they copied the affected part)